CVE-2026-111753: @angular/common >= 21.0.0, < 21.0.3, >= 20.0.0, < 20.3.34, <= 19.2.25

CVE-2026-111753 affects @angular/common. Affected range: >= 21.0.0, < 21.0.3. Fixed version: 21.0.3. Affected range: >= 20.0.0, < 20.3.34. Fixed version: 20.3.34. Affected range: <= 19.2.25.

Affected technology

@angular/common · >= 21.0.0, < 21.0.3
Vendor not specified by the source

@angular/common · >= 20.0.0, < 20.3.34
Vendor not specified by the source

@angular/common · <= 19.2.25
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 21-Oct-2026 05:34 UTC

Product: @angular/common
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-21 04:17:24.410927+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-111753.html