EUVD-2026-38258

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

PT-2026-51338

Name of the Vulnerable Software and Affected Versions Angular Language Service VS Code Extension versions prior to 21.2.4 Description The client-side extension configures the tooltip Markdown renderer with the isTrusted: true option, causing VS Code to trust all rendered content and enable active...

CVE-2026-49241: Improper Neutralization of Input During Web Page Generation

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

CVE-2026-50178: Improper Neutralization of Input During Web Page Generation

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the tooltip Markdown renderer with the isTrusted: true option located in client/src/client.ts. This setting instructs VS...

@soushians/starter (>=1.0.93, <=1.0.939), angular-reusable-components (2.0.82) +5 more potentially affected by CVE-2021-4231 via @angular/language-service (>=5.0.0, <=5.2.0)

@angular/language-service NPM version =5.0.0, =1.0.93, =1.2.9, =4.0.3, =0.0.1, =0.3.0 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...