GHSA-vgxq-6rcf-qwrw

Exploit Intelligence

• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (npm:bower) (github-poc)

…and 8 more exploits

Timeline

• CVE Published
• Apr 9, 2026 Security Advisory