Security Alert – CVE-2026-50171

[github-actions]

General Information

• Title: @angular/common: Angular @angular/common: Denial of Service via malformed digitsInfo parameter
• Category: vulnerabilities
• Severity: high
• Published date: 2026-06-22
• Short Description: @angular/common: Angular @angular/common: Denial of Service via malformed digitsInfo parameter

Affected Package

• Package name: @angular/common
• Fixed version: 22.0.0-rc.2, 20.3.22, 19.2.23, 21.2.15

Classification

• Rule: CVE-2026-50171
• Category: vulnerabilities
• Advisory URL: https://access.redhat.com/security/cve/CVE-2026-50171

References

• https://access.redhat.com/security/cve/CVE-2026-50171
• https://github.com/angular/angular
• fix(common): add upper bounds for digitsInfo angular/angular#68840
• GHSA-p3vc-36g9-x9gr
• https://nvd.nist.gov/vuln/detail/CVE-2026-50171
• https://www.cve.org/CVERecord?id=CVE-2026-50171