CVE-2026-54268: Angular Format Date Dos Missing Length Limit

The `formatDate` function lacks an explicit length check on the `format` parameter. This can lead to memory exhaustion and Denial of Service (DoS) due to continuous regular expression evaluation loops down the execution path.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-54268-angular-format-date-dos-missing-length-limit --engine opengrep

Description

The `formatDate` function lacks an explicit length check on the `format` parameter. This can lead to memory exhaustion and Denial of Service (DoS) due to continuous regular expression evaluation loops down the execution path.