How many CVEs does angular have?

angular has 47 published CVE records since 2019, including 36 in the last two years.

How many angular CVEs are in CISA KEV?

None of angular's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which angular products have the most CVEs?

The angular products with the most published CVEs are angular, angular.js, @angular/core, @angular/platform-server, angular-cli.

What are the most common weakness types in angular CVEs?

angular's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-791 (Incomplete Filtering of Special Elements), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-1333 (Inefficient Regular Expression Complexity).

Are there public exploits for angular vulnerabilities?

Yes — 13 of angular's CVEs have a known public exploit.

How many critical angular vulnerabilities are there?

angular has 1 critical and 27 high-severity CVEs.

What is the average severity of angular CVEs?

The average CVSS base score across angular's scored CVEs is 7.1.

angular Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 7.1
Critical / high: 60%
Actively exploited (KEV): 0%
Public exploit available: 28%
Patch available: 98%

angular Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest angular CVEs

Other vendors

Frequently asked questions

References

Track angular vulnerabilities