PT-2026-2230

🗓️ 09 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

XSS exists in Angular Template Compiler due to SVG href sanitization; update to fixed versions.

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Client is vulnerable to cross-site scripting due to Angular (CVE-2026-22610)	1 Aug 202603:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities related to Angular and JJWT have been fixed in IBM Informix HQ 3.2.2.	27 Apr 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of compiler-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by Cross-Site Scripting (XSS).	2 Jun 202614:44	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of core-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by cross-site scripting (XSS) issue.	2 Jun 202614:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect for Space Management is vulnerable to cross-site scripting due to Angular (CVE-2026-22610)	31 Jul 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery due to Angular [CVE-2025-66412, CVE-2026-22610, CVE-2025-66035]	20 Feb 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by Cross-Site Request Forgery and Cross-Site Scripting in Digital Certificate Manager and Navigator for i [CVE-2025-66035, CVE-2025-66412, CVE-2026-22610]	20 Feb 202616:42	–	ibm
GithubExploit	Exploit for CVE-2026-22610	18 Jan 202611:38	–	githubexploit
Chainguard	CVE-2026-22610 vulnerabilities	15 Jul 202614:17	–	cgr
Circl	CVE-2026-22610	10 Jan 202605:03	–	circl

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22610
github	www.github.com/angular/angular/security/advisories/GHSA-jrmj-c5cx-3cw6
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2026-22610
github	www.github.com/angular/angular
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2026-22610
github	www.github.com/angular/angular/commit/91dc91bae4a1bbefc58bef6ef739d0e02ab44d56
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-22610
osv	www.osv.dev/vulnerability/GHSA-jrmj-c5cx-3cw6
twitter	www.twitter.com/pulsepatchio/status/2010359045270724719
twitter	www.twitter.com/Komodosec/status/2023836436303409444

17 Feb 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 48.5

EPSS0.00444

SSVC

angular template compiler svg script href resource url context vulnerability versions