Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Cross-site Scripting (XSS)
CVE-2025-66412
Affects
@angular/compiler
| Versions
<19.2.17
>=20.0.0-next.0 <20.3.15
>=21.0.0-next.0 <21.0.2
M
Cross-site Scripting (XSS)
CVE-2026-50557
Affects
@angular/core
| Versions
<19.2.18
>=20.0.0-next.0 <20.3.22
>=21.0.0-next.0 <21.2.15
>=22.0.0-next.0 <22.0.0-rc.2
H
Modification of Assumed-Immutable Data
CVE-2026-54267
Affects
@angular/core
| Versions
<20.3.25
>=21.0.0-next.0 <21.2.17
>=22.0.0-next.0 <22.0.1
M
Cross-site Scripting (XSS)
CVE-2026-52725
Affects
@angular/core
| Versions
<19.2.23
>=20.0.0-next.0 <20.3.22
>=21.0.0-next.0 <21.2.15
>=22.0.0-next.0 <22.0.0-rc.2
L
Cross-site Scripting (XSS)
CVE-2026-32635
Affects
@angular/core
| Versions
<19.2.20
>=20.0.0-next.0 <20.3.18
>=21.0.0-next.0 <21.2.3
>=22.0.0-next.0 <22.0.0-next.2
H
Cross-site Scripting (XSS)
CVE-2026-27970
Affects
@angular/core
| Versions
<19.2.19
>=20.0.0-next.0 <20.3.17
>=21.0.0-next.0 <21.1.6
>=21.2.0-next.0 <21.2.0
L
Cross-site Scripting (XSS)
CVE-2026-22610
Affects
@angular/core
| Versions
<19.2.18
>=20.0.0-next.0 <20.3.16
>=21.0.0-next.0 <21.0.7
>=21.1.0-next.0 <21.1.0-rc.0
L
Cross-site Scripting (XSS)
CVE-2021-4231
Affects
@angular/core
| Versions
<11.0.5
>=11.1.0-next.0 <11.1.0-next.3
C
Malicious Package
Affects
@angular_devkit/architect
| Versions
*
C
Malicious Package
Affects
@angular_devkit/build_angular
| Versions
*
C
Server-side Request Forgery (SSRF)
CVE-2026-27739
Affects
@angular-devkit/build-angular
| Versions
<19.2.21
>=20.0.0-next.0 <20.3.17
>=21.0.0-next.0 <21.1.5
>=21.2.0-next.0 <21.2.0-rc.0
C
Malicious Package
Affects
@angular_devkit/build-webpack
| Versions
*
C
Malicious Package
Affects
@angular_devkit/core
| Versions
*
C
Malicious Package
Affects
angular-dev-test
| Versions
*
C
Malicious Package
Affects
angular-directive-seed
| Versions
*
C
Eval Injection
CVE-2026-44643
Affects
angular-expressions
| Versions
<1.5.2
H
Prototype Pollution
CVE-2024-54152
Affects
angular-expressions
| Versions
<1.4.3
C
Remote Code Execution (RCE)
CVE-2021-21277
Affects
angular-expressions
| Versions
<1.1.2
H
Remote Code Execution (RCE)
CVE-2020-5219
Affects
angular-expressions
| Versions
<1.0.1
C
Malicious Package
Affects
angularfire-seed
| Versions
*
M
Cross-site Scripting (XSS)
Affects
angular-froala
| Versions
*
M
Cross-site Scripting (XSS)
Affects
angular-gettext
| Versions
<1.0.0
H
Directory Traversal
Affects
angular-http-server
| Versions
<1.4.4
H
Directory Traversal
CVE-2018-3713
Affects
angular-http-server
| Versions
<1.4.3
C
Malicious Package
Affects
angular-identity-component
| Versions
*
C
Malicious Package
Affects
angular-intro
| Versions
*
M
Access Restriction Bypass
CVE-2018-11537
Affects
angular-jwt
| Versions
<0.1.10
C
Malicious Package
Affects
angular-link-diver
| Versions
*
C
Malicious Package
Affects
angular-location-update
| Versions
>0.0.2 <0.0.4
C
Malicious Package
Affects
angular-material-sidenav-rnd
| Versions
*