Repository navigation
Bump @angular/router from 16.2.4 to 16.2.12 in /graph-app - #318
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Microsoft GitHub Policy Service / GitOps/AdvancedSecurity
failed
Oct 22, 2026 in 0s
Dependency Review
Dependency review detected vulnerable
Details
Dependency review summary
We have found 2 vulnerable package(s).
Vulnerability
Vulnerabilities were filtered by minimum severity Moderate.
| Dependency | File Name | Version | Vulnerability | Severity |
|---|---|---|---|---|
| @angular/router | graph-app/package-lock.json | 16.2.12 | Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters | High |
| @angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR) | High |
Loading