CVE-2026-50171

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-50171", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-03T20:54:20.433Z", "datePublished": "2026-06-22T15:49:51.774Z", "dateUpdated": "2026-06-23T16:02:07.902Z"}, "containers": {"cna": {"title": "Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)", "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "lang": "en", "description": "CWE-400: Uncontrolled Resource Consumption", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-834", "lang": "en", "description": "CWE-834: Excessive Iteration", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr"}], "affected": [{"vendor": "angular", "product": "angular", "versions": [{"version": ">= 22.0.0-next.0, < 22.0.0-rc.2", "status": "affected"}, {"version": ">= 21.0.0-next.0, < 21.2.15", "status": "affected"}, {"version": ">= 20.0.0-next.0, < 20.3.22", "status": "affected"}, {"version": ">= 19.0.0-next.0, < 19.2.23", "status": "affected"}, {"version": "<= 18.2.14", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-22T15:49:51.774Z"}, "descriptions": [{"lang": "en", "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service (DoS) vulnerability exists in the @angular/common package of Angular. The formatNumber function, which is also utilized by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. Specifically, the minimum and maximum fraction digits parsed from the digitsInfo string (e.g., 1.2-4) are converted to integers and used without limits. When parsing a maliciously crafted digitsInfo string with excessively large fraction digit values (e.g., 1.200000000-200000000), the internal roundNumber function attempts to pad the digits array to match the requested fraction size. This results in an unbounded loop that repeatedly pushes elements into an array. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23."}], "source": {"advisory": "GHSA-p3vc-36g9-x9gr", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-23T14:16:53.849153Z", "id": "CVE-2026-50171", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-23T16:02:07.902Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-50171", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-03T20:54:20.433Z", "datePublished": "2026-06-22T15:49:51.774Z", "dateUpdated": "2026-06-23T16:02:07.902Z"}, "containers": {"cna": {"title": "Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)", "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "lang": "en", "description": "CWE-400: Uncontrolled Resource Consumption", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-834", "lang": "en", "description": "CWE-834: Excessive Iteration", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr"}], "affected": [{"vendor": "angular", "product": "angular", "versions": [{"version": ">= 22.0.0-next.0, < 22.0.0-rc.2", "status": "affected"}, {"version": ">= 21.0.0-next.0, < 21.2.15", "status": "affected"}, {"version": ">= 20.0.0-next.0, < 20.3.22", "status": "affected"}, {"version": ">= 19.0.0-next.0, < 19.2.23", "status": "affected"}, {"version": "<= 18.2.14", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-22T15:49:51.774Z"}, "descriptions": [{"lang": "en", "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service (DoS) vulnerability exists in the @angular/common package of Angular. The formatNumber function, which is also utilized by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. Specifically, the minimum and maximum fraction digits parsed from the digitsInfo string (e.g., 1.2-4) are converted to integers and used without limits. When parsing a maliciously crafted digitsInfo string with excessively large fraction digit values (e.g., 1.200000000-200000000), the internal roundNumber function attempts to pad the digits array to match the requested fraction size. This results in an unbounded loop that repeatedly pushes elements into an array. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23."}], "source": {"advisory": "GHSA-p3vc-36g9-x9gr", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-50171", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-23T14:16:53.849153Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-23T14:16:59.203Z"}}]}}

{"affected": [{"affectedData": [{"product": "angular", "vendor": "angular", "versions": [{"status": "affected", "version": ">= 22.0.0-next.0, < 22.0.0-rc.2"}, {"status": "affected", "version": ">= 21.0.0-next.0, < 21.2.15"}, {"status": "affected", "version": ">= 20.0.0-next.0, < 20.3.22"}, {"status": "affected", "version": ">= 19.0.0-next.0, < 19.2.23"}, {"status": "affected", "version": "<= 18.2.14"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "B0857B9D-DDD4-42CC-B026-AF3B4081BD14", "versionEndIncluding": "18.2.14", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "9AF8FC47-F9CA-48DC-88C4-51ECA89577A7", "versionEndExcluding": "19.2.23", "versionStartIncluding": "19.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "6594675A-6A09-4550-AF8B-C9E25CCFE022", "versionEndExcluding": "20.3.22", "versionStartIncluding": "20.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "C446A761-4FD9-43B8-8EF2-8A23EC2091DF", "versionEndExcluding": "21.2.15", "versionStartIncluding": "21.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next0:*:*:*:node.js:*:*", "matchCriteriaId": "71DA6BB7-D67B-431B-A4BB-792DEC51C980", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next1:*:*:*:node.js:*:*", "matchCriteriaId": "01F108F8-1BC4-4E33-BB49-646C118CA697", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next10:*:*:*:node.js:*:*", "matchCriteriaId": "C5388FC5-DA5B-4C27-B868-E0D8BAD2EB28", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next11:*:*:*:node.js:*:*", "matchCriteriaId": "4A18EA1D-24C0-43F7-B73B-562F86E3A46E", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next12:*:*:*:node.js:*:*", "matchCriteriaId": "B59DAA7F-A7B5-4687-96B0-10CD61165910", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next2:*:*:*:node.js:*:*", "matchCriteriaId": "19366888-B58B-4AEE-B99C-CBB26CCF9AA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next3:*:*:*:node.js:*:*", "matchCriteriaId": "D22F98A2-DB7A-41D2-AAA0-90D8AE707267", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next4:*:*:*:node.js:*:*", "matchCriteriaId": "7D19C89E-9D61-4DBD-8CA5-5F317691E1B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next5:*:*:*:node.js:*:*", "matchCriteriaId": "D6E69821-B1AB-4FE8-9245-74775E86D346", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next6:*:*:*:node.js:*:*", "matchCriteriaId": "E7096357-4623-475F-A015-ADB8EE2B450F", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next7:*:*:*:node.js:*:*", "matchCriteriaId": "A81F04C2-2824-40B9-B7F8-B27E6DF21403", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next8:*:*:*:node.js:*:*", "matchCriteriaId": "D0002A01-F19D-47F3-94EA-C3423EC763E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:next9:*:*:*:node.js:*:*", "matchCriteriaId": "7499CFC4-AAA5-461E-909F-0E514CFD5DA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:rc0:*:*:*:node.js:*:*", "matchCriteriaId": "2A781EF8-8ADA-4960-B839-0064607D36AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:angular:angular:22.0.0:rc1:*:*:*:node.js:*:*", "matchCriteriaId": "4775F816-6599-44D3-BD0F-9C843AB37DF3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service (DoS) vulnerability exists in the @angular/common package of Angular. The formatNumber function, which is also utilized by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. Specifically, the minimum and maximum fraction digits parsed from the digitsInfo string (e.g., 1.2-4) are converted to integers and used without limits. When parsing a maliciously crafted digitsInfo string with excessively large fraction digit values (e.g., 1.200000000-200000000), the internal roundNumber function attempts to pad the digits array to match the requested fraction size. This results in an unbounded loop that repeatedly pushes elements into an array. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23."}], "id": "CVE-2026-50171", "lastModified": "2026-07-09T15:41:41.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-50171", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-23T14:16:53.849153Z", "version": "2.0.3"}}]}, "published": "2026-06-22T18:16:42.533", "references": [{"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-834"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "@angular/common: Angular @angular/common: Denial of Service via malformed digitsInfo parameter", "id": "2491477", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491477"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-835", "details": ["Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service (DoS) vulnerability exists in the @angular/common package of Angular. The formatNumber function, which is also utilized by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. Specifically, the minimum and maximum fraction digits parsed from the digitsInfo string (e.g., 1.2-4) are converted to integers and used without limits. When parsing a maliciously crafted digitsInfo string with excessively large fraction digit values (e.g., 1.200000000-200000000), the internal roundNumber function attempts to pad the digits array to match the requested fraction size. This results in an unbounded loop that repeatedly pushes elements into an array. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23.", "A flaw was found in the @angular/common package of Angular. The formatNumber function, which is also used by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. A remote attacker could exploit this by providing a maliciously crafted digitsInfo string with excessively large fraction digit values. This leads to an unbounded loop, causing a Denial of Service (DoS) in the affected application."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\nUpgrade to fixed versions or apply patches (ref: https://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr)"}, "name": "CVE-2026-50171", "package_state": [{"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Not affected", "package_name": "rhacm2/volsync-operator-bundle", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Not affected", "package_name": "rhacm2/volsync-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:apicurio_registry:3", "fix_state": "Not affected", "package_name": "apicurio/apicurio-registry-ui-rhel8", "product_name": "Red Hat build of Apicurio Registry 3"}, {"cpe": "cpe:/a:redhat:apicurio_registry:3", "fix_state": "Not affected", "package_name": "apicurio/apicurio-registry-ui-rhel9", "product_name": "Red Hat build of Apicurio Registry 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:4", "fix_state": "Not affected", "package_name": "ceph", "product_name": "Red Hat Ceph Storage 4"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "ceph", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "gjs", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "intel-cmt-cat", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "dotnet5.0-build-reference-packages", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "intel-cmt-cat", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "mozjs60", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "ceph", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "gjs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "intel-cmt-cat", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:jboss_fuse:7", "fix_state": "Fix deferred", "package_name": "common", "product_name": "Red Hat Fuse 7"}], "public_date": "2026-06-22T15:49:51Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-50171\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-50171\nhttps://github.com/angular/angular/security/advisories/GHSA-p3vc-36g9-x9gr"], "statement": "A flaw was found in the @angular/common package. The formatNumber function, also used by DecimalPipe, PercentPipe, and CurrencyPipe, does not validate the upper bounds of the digitsInfo parameter. When a maliciously crafted digitsInfo string with excessively large fraction digit values is provided, the internal roundNumber function enters an unbounded loop, causing a Denial of Service through memory exhaustion and CPU hang. Exploitation requires the application to pass user-controlled input to the digitsInfo parameter, which is not the default Angular usage pattern.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[22.0.0-next.0,22.0.0-rc.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[21.0.0-next.0,21.2.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[20.0.0-next.0,20.3.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[19.0.0-next.0,19.2.23)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,18.2.14]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "angular", "source": "cna", "vendor": "angular"}, "product": "angular", "vendor": "angular"}], "created": "2026-06-22T19:00:14.184779+00:00", "updated": "2026-06-30T02:00:05.100947+00:00", "vendors": ["angular", "angular$PRODUCT$angular"]}