Cloudanix VulnDB

GHSA-g93w-mfhg-p222

Critical · 9.0

CVSS

9.0

EPSS

—

Published

Mar 13, 2026

CISA due date

—

The record

Angular vulnerable to XSS in i18n attribute bindings

Affected packages

Ecosystem Package Introduced Fixed
npm @angular/compiler 17.0.0-next.0 No fix
npm @angular/compiler 19.0.0-next.0 19.2.20
npm @angular/compiler 20.0.0-next.0.0.0 20.3.18
npm @angular/compiler 21.0.0-next.0 21.2.4
npm @angular/compiler 22.0.0-next.0 22.0.0-next.3
npm @angular/core 17.0.0-next.0 No fix
npm @angular/core 19.0.0-next.0 19.2.20
npm @angular/core 20.0.0-next.0.0.0 20.3.18
npm @angular/core 21.0.0-next.0 21.2.4
npm @angular/core 22.0.0-next.0 22.0.0-next.3

Related vulnerabilities