Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:google:angular:*:*:*:*:*:*:*:*

2 briefs RSS
medium advisory

Angular: Denial of service via RouterLink query parameter retention (CVE-2026-111751)

A memory exhaustion vulnerability in @angular/router during server-side rendering allows remote, unauthenticated attackers to crash Node.js SSR workers by sending concurrent requests with dense, oversized query strings.

Angular +1 denial-of-service nodejs ssr
1t 1c
medium advisory

Denial of Service in Angular Router via Numeric URL Matrix Parameters

A high-severity denial of service vulnerability in @angular/router enables memory exhaustion in Node.js SSR environments through crafted URLs with numeric matrix parameters that trigger oversized V8 object allocation.

@angular/router +3 denial-of-service angular nodejs v8 cve-2026-101896
1r 1t