MEDIUM6.1npm
GHSA-58w9-8g37-x9v5· CVE-2026-54265@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)
Modified: 9/10/2026
package
npm/@angular/compiler
pkg:npm/%40angular/compiler
MEDIUM6.1npm
GHSA-f3m7-gqxr-g87x· CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
Modified: 9/10/2026
CRITICAL9.0npm
GHSA-g93w-mfhg-p222· CVE-2026-32635Angular vulnerable to XSS in i18n attribute bindings
Modified: 5/6/2026
MEDIUMnpm
GHSA-hh8m-fm6v-7cvg· CVE-2026-88057Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
Modified: 9/10/2026
HIGHnpm
GHSA-jj27-h5hq-8x99· CVE-2026-69151Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Modified: 8/3/2026
HIGHnpm
GHSA-jrmj-c5cx-3cw6· CVE-2026-22610Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
Modified: 9/10/2026
HIGHnpm
GHSA-v4hv-rgfq-gp49· CVE-2025-66412Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
Modified: 9/10/2026