GHSA-prjf-86w9-mfqv
Medium · 6.1CVSS
6.1
EPSS
—
Published
Feb 27, 2026
CISA due date
—
The record
Angular i18n vulnerable to Cross-Site Scripting
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @angular/core | 0 | No fix |
| npm | @angular/core | 19.0.0-next.0 | 19.2.19 |
| npm | @angular/core | 20.0.0-next.0 | 20.3.17 |
| npm | @angular/core | 21.0.0-next.0 | 21.1.6 |
| npm | @angular/core | 21.2.0-next.0 | 21.2.0 |
Related vulnerabilities
- CVE-2026-27970 Angular is a development platform for building mobile and desktop web applications using… Same vulnerability
- CVE-2026-54267 Angular is a development platform for building mobile and desktop web applications using… Also affects @angular/core
- CVE-2026-52725 Angular is a development platform for building mobile and desktop web applications using… Also affects @angular/core
- CVE-2026-50557 Angular is a development platform for building mobile and desktop web applications using… Also affects @angular/core
- GHSA-f3m7-gqxr-g87x Angular: Template and Attribute Namespace Sanitization Bypass (XSS) Also affects @angular/core
- GHSA-692r-grfm-v8x7 @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to… Also affects @angular/core
- GHSA-rgjc-h3x7-9mwg Angular Client Hydration DOM Clobbering & Response-Cache Poisoning Also affects @angular/core
- CVE-2026-32635 Angular is a development platform for building mobile and desktop web applications using… Also affects @angular/core