An open index of dependabot pull requests across open source projects.

@angular/core

Ecosystem:
npm
Package URL:
pkg:npm/@angular/core
Total PRs:
7,081 Dependabot PRs
Latest PR:
about 6 hours ago
Unique Repositories:
1,930 repositories
Unique Repos (30 days):
19 repositories
Security Advisories
Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
GHSA-rgjc-h3x7-9mwg CVE-2026-54267 HIGH published about 1 month ago • updated about 11 hours ago
To optimize client-side bootstrap in Server-Side Rendered (SSR) environments, Angular supports **Hydration** via `provideClientHydration()`. During...
Angular vulnerable to Cross-site Scripting
GHSA-c75v-2vq8-878f CVE-2021-4231 MODERATE published about 4 years ago • updated 17 minutes ago
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The m...
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
GHSA-jrmj-c5cx-3cw6 CVE-2026-22610 HIGH published 7 months ago • updated 19 minutes ago
A Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s interna...
Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
GHSA-f3m7-gqxr-g87x CVE-2026-50557 MODERATE published about 1 month ago • updated about 11 hours ago
An issue in the `@angular/compiler` and `@angular/core` packages allows bypassing element and attribute sanitization/validation through specific na...
@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)
GHSA-692r-grfm-v8x7 CVE-2026-52725 MODERATE published about 1 month ago • updated about 11 hours ago
An issue in the `@angular/core` package allows bypassing script-execution restrictions during dynamic component creation. Specifically, the dynami...
Recent PRs
Bump the angular group with 10 updates

Baylox/portfoliot #5

21.2.18 → 22.0.8 Major PR
Open about 6 hours ago 1 comment
Baylox
Bump @angular/core from 19.2.21 to 20.3.25

pombase/website #2514

19.2.21 → 20.3.25 Major PR
Closed about 1 month ago 2 comments
pombase
Package Details
Name: @angular/core
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@angular/core
JSON API: View JSON
Security Advisories

7

Active advisories
HIGH 4
MODERATE 3
View All npm Advisories
Package Information
Description:

Angular - the core framework

Repository: https://github.com/angular/angular
Homepage: https://github.com/angular/angular#readme
Latest Release: 20.0.2
about 1 year ago
Dependent Repos: 768,558
Dependent Packages: 26,429
Downloads: 17,373,189
Ranking: Top 0.0416% by dependent repos Top 0.0765% by downloads Top 0.0047% by dependent pkgs
PR Status
Open 2,531 (35.7%)
Merged 917 (13.0%)
Closed 3,083 (43.5%)
PR Types
Major 2,504 (35.4%)
Minor 1,090 (15.4%)
Patch 2,935 (41.4%)