Lucene search
+L

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

🗓️ 10 Sep 2026 20:18:02Reported by GitHub Advisory DatabaseType 
github
 github
🔗 github.com👁 4 Views

Angular sanitization bypass in host bindings enables XSS via untrusted URL values on host elements.

Related
Detection
Refs
Vulners
Node
OR
angularcompilerRange19.2.25npm
angularcoreRange19.2.25npm
angularcompilerRange20.0.020.3.28npm
angularcoreRange20.0.020.3.28npm
angularcompilerRange21.0.021.2.20npm
angularcoreRange21.0.021.2.20npm
angularcompilerRange22.0.022.1.0npm
angularcoreRange22.0.022.1.0npm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation