CVE-2026-101895 - Angular SSR infinite loop in `@angular/platform-server` enables remote DoS - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

CVE-2026-101895

By Stav Salman |

28 September 2026

CVE-2026-101895 – Angular SSR infinite loop in `@angular/platform-server` enables remote DoS

@angular/platform-server (Angular SSR) uses domino to parse server-sanitized HTML; an incomplete `