@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +22 more potentially affected by CVE-2026-88057 via @angular/compiler (>=21.0.0, <=21.2.19)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =1.0.0, =4.4.0-beta.2, =0.19.0, =14.0.0, =1.0.0-next.27766, =1.0.77-rc.1, =1.0.87 and more Source cves: CVE-2026-88057 Source advisory: OSV:GHSA-HH8M-FM6V-7CVG...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +22 more potentially affected by CVE-2026-88057 via @angular/compiler (>=21.0.0, <=21.2.19)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =1.0.0, =4.4.0-beta.2, =0.19.0, =14.0.0, =1.0.0-next.27766, =1.0.77-rc.1, =1.0.87 and more Source cves: CVE-2026-88057 Source advisory: GHSA-HH8M-FM6V-7CVG...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +16 more potentially affected by CVE-2026-88057 via @angular/compiler (>=22.0.0, <=22.0.8)

@angular/compiler NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.0-workstream-forge.3, =0.0.0-workstream-forge.12, =0.0.0-workstream-forge.31 and more Source cves: CVE-2026-88057 Source advisory:...

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...

GHSA-HH8M-FM6V-7CVG Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +16 more potentially affected by CVE-2026-88057 via @angular/compiler (>=22.0.0, <=22.0.8)

@angular/compiler NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.0-workstream-forge.3, =0.0.0-workstream-forge.12, =0.0.0-workstream-forge.31 and more Source cves: CVE-2026-88057 Source advisory:...

CVE-2026-88057

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-88057 via @angular/compiler (>=20.0.0, <=20.3.21)

@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-88057 Source advisory:...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +22 more potentially affected by CVE-2026-88057 via @angular/compiler (>=21.0.0, <=21.2.19)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =1.0.0, =4.4.0-beta.2, =0.19.0, =14.0.0, =1.0.0-next.27766, =1.0.77-rc.1, =1.0.87 and more Source cves: CVE-2026-88057 Source advisory: MEND:CVE-2026-88057...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +16 more potentially affected by CVE-2026-88057 via @angular/compiler (>=22.0.0, <=22.0.8)

@angular/compiler NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.0-workstream-forge.3, =0.0.0-workstream-forge.12, =0.0.0-workstream-forge.31 and more Source cves: CVE-2026-88057 Source advisory: MEND:CVE-2026-8805...

CVE-2026-88057: Improper Neutralization of Input During Web Page Generation

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

Security Bulletin: IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and common-joins (CVE-2026-69151, CVE-2026-68945)

Summary IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and comma-joins CVE-2026-69151, CVE-2026-68945 The affected versions have been updated within IBM Applin...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-69151 via @angular/compiler (22.0.0)

@angular/compiler NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/compiler and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-69151 Source advisory: OSV:GHSA-JJ27-H5HQ-8X99...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-69151 via @angular/compiler (22.0.0)

@angular/compiler NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/compiler and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-69151 Source advisory: SNYK:JS-ANGULARCOMPILER-18550631...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +298 more potentially affected by CVE-2026-69151 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-69151 Source advisory: OSV:GHSA-JJ27-H5HQ-8X99...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +298 more potentially affected by CVE-2026-69151 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-69151 Source advisory: GHSA-JJ27-H5HQ-8X99...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-69151 via @angular/compiler (>=20.0.0-rc.0, <=20.3.21)

@angular/compiler NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-69151 Source...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-69151 via @angular/compiler (>=20.0.0-rc.0, <=20.3.21)

@angular/compiler NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-69151 Source...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +21 more potentially affected by CVE-2026-69151 via @angular/compiler (>=21.0.0-next.1, <=21.2.17)

@angular/compiler NPM version =21.0.0-next.1, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =1.0.0, =4.4.0-beta.2, =0.19.0, =1.0.0-next.27766, =1.0.77-rc.1, =0.0.1, =0.5.11 and more Source cves: CVE-2026-69151 Source advisory:...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-69151 via @angular/compiler (22.0.0)

@angular/compiler NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/compiler and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-69151 Source advisory: GHSA-JJ27-H5HQ-8X99...