npm/@angular/core

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

Modified: 9/10/2026

Angular vulnerable to Cross-site Scripting

Modified: 9/10/2026

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Modified: 9/10/2026

Angular vulnerable to XSS in i18n attribute bindings

Modified: 5/6/2026

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Modified: 9/10/2026

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Modified: 8/3/2026

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Modified: 9/10/2026

Angular i18n vulnerable to Cross-Site Scripting

Modified: 9/10/2026

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Modified: 9/10/2026