Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-101896 · Microsoft / collected KEV context

EUVD-2026-101147

GHSA-ff3f-86qr-9cv3

cve-program · CVE-2026-101896

• https://github.com/angular/angular/security/advisories/GHSA-ff3f-86qr-9cv3
• https://github.com/angular/angular/issues/70716
• https://github.com/angular/angular/pull/70717
• https://github.com/angular/angular/commit/03872a80bcf1c89b2b04cdd3f444b2ee954da583
• https://github.com/angular/angular/commit/5af61216eab8bf4a6697a1d79bda3d857c06f89d
• https://github.com/angular/angular/commit/ddfe21072ba32ca4cd9d7d3c6b7df66af81d58c4
• https://github.com/angular/angular/releases/tag/v20.3.32
• https://github.com/angular/angular/releases/tag/v21.2.24
• https://github.com/angular/angular/releases/tag/v22.2.0

euvd · EUVD-2026-101147

• https://github.com/angular/angular/security/advisories/GHSA-ff3f-86qr-9cv3
• https://github.com/angular/angular/issues/70716
• https://github.com/angular/angular/pull/70717
• https://github.com/angular/angular/commit/03872a80bcf1c89b2b04cdd3f444b2ee954da583
• https://github.com/angular/angular/commit/5af61216eab8bf4a6697a1d79bda3d857c06f89d
• https://github.com/angular/angular/commit/ddfe21072ba32ca4cd9d7d3c6b7df66af81d58c4
• https://github.com/angular/angular/releases/tag/v20.3.32
• https://github.com/angular/angular/releases/tag/v21.2.24
• https://github.com/angular/angular/releases/tag/v22.2.0

nvd · CVE-2026-101896

• https://github.com/angular/angular/commit/03872a80bcf1c89b2b04cdd3f444b2ee954da583
• https://github.com/angular/angular/commit/5af61216eab8bf4a6697a1d79bda3d857c06f89d
• https://github.com/angular/angular/commit/ddfe21072ba32ca4cd9d7d3c6b7df66af81d58c4
• https://github.com/angular/angular/issues/70716
• https://github.com/angular/angular/pull/70717
• https://github.com/angular/angular/releases/tag/v20.3.32
• https://github.com/angular/angular/releases/tag/v21.2.24
• https://github.com/angular/angular/releases/tag/v22.2.0
• https://github.com/angular/angular/security/advisories/GHSA-ff3f-86qr-9cv3

osv · GHSA-ff3f-86qr-9cv3

• https://github.com/angular/angular/security/advisories/GHSA-ff3f-86qr-9cv3
• https://github.com/angular/angular/issues/70716
• https://github.com/angular/angular/pull/70717
• https://github.com/angular/angular/commit/03872a80bcf1c89b2b04cdd3f444b2ee954da583
• https://github.com/angular/angular/commit/5af61216eab8bf4a6697a1d79bda3d857c06f89d
• https://github.com/angular/angular/commit/ddfe21072ba32ca4cd9d7d3c6b7df66af81d58c4
• https://github.com/angular/angular

No related operational record is retained in the current change model.