Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-54268 · CVE overview and exploitation status

EUVD-2026-38273

GHSA-48r7-hpm6-gfxm

cve-program · CVE-2026-54268

• https://github.com/angular/angular/security/advisories/GHSA-48r7-hpm6-gfxm
• https://github.com/angular/angular/pull/69197
• https://github.com/angular/angular/commit/eeb03f4ea310e2e51ba5d53a421ec7b418e186cd

euvd · EUVD-2026-38273

• https://github.com/angular/angular/security/advisories/GHSA-48r7-hpm6-gfxm
• https://github.com/angular/angular/pull/69197
• https://github.com/angular/angular/commit/eeb03f4ea310e2e51ba5d53a421ec7b418e186cd

nvd · CVE-2026-54268

• https://github.com/angular/angular/commit/eeb03f4ea310e2e51ba5d53a421ec7b418e186cd
• https://github.com/angular/angular/pull/69197
• https://github.com/angular/angular/security/advisories/GHSA-48r7-hpm6-gfxm

osv · GHSA-48r7-hpm6-gfxm

• https://github.com/angular/angular/security/advisories/GHSA-48r7-hpm6-gfxm
• https://nvd.nist.gov/vuln/detail/CVE-2026-54268
• https://github.com/angular/angular/pull/69197
• https://github.com/angular/angular/commit/eeb03f4ea310e2e51ba5d53a421ec7b418e186cd
• https://github.com/angular/angular

No related changes are available here.