@angular/common (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @angular/common, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2025-66035: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-50170 — CVSS 7.5 (high): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-54268 — CVSS 7.5 (high): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-50171 — CVSS 6.1 (medium): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-54266 — CVSS 6.1 (medium): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…