Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filtersAngular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements
Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)
Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
Angular vulnerable to XSS in i18n attribute bindings
Angular i18n vulnerable to Cross-Site Scripting
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
angular vulnerable to super-linear runtime due to backtracking
Angular (deprecated package) Cross-site Scripting
Angular vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.