Cloudanix VulnDB

GHSA-jrmj-c5cx-3cw6

None

CVSS

—

EPSS

—

Published

Jan 9, 2026

CISA due date

—

The record

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Affected packages

Ecosystem Package Introduced Fixed
npm @angular/compiler 0 No fix
npm @angular/compiler 19.0.0-next.0 19.2.18
npm @angular/compiler 20.0.0-next.0 20.3.16
npm @angular/compiler 21.0.0-next.0 21.0.7
npm @angular/compiler 21.1.0-next.0 21.1.0-rc.0
npm @angular/core 0 No fix
npm @angular/core 19.0.0-next.0 19.2.18
npm @angular/core 20.0.0-next.0 20.3.16
npm @angular/core 21.0.0-next.0 21.0.7
npm @angular/core 21.1.0-next.0 21.1.0-rc.0

Related vulnerabilities