CVE-2026-50171 | Angular up to 18.2.14/19.2.22/20.3.21/21.2.14 formatNumber digitsInfo resource consumption (GHSA-p3vc-36g9-x9gr)

A vulnerability was found in Angular up to 18.2.14/19.2.22/20.3.21/21.2.14. It has been declared as problematic. Affected is the function formatNumber. The manipulation of the argument digitsInfo results in resource consumption.

This vulnerability is identified as CVE-2026-50171. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More