2421 matches found
CVE-2026-88057: Improper Neutralization of Input During Web Page Generation
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...
CVE-2026-88059: Exposure of Sensitive Information to an Unauthorized Actor
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering SSR and hydration u...
CVE-2026-88058: Improper Neutralization of Input During Web Page Generation
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...
PT-2026-89700
Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...
Linux Distros Unpatched Vulnerability : CVE-2026-88059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, a...
CVE-2026-88060: Improper Neutralization of Input During Web Page Generation
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...
PT-2026-89571
Name of the Vulnerable Software and Affected Versions Angular versions prior to 20.3.30 Angular versions prior to 21.2.22 Angular versions prior to 22.1.4 Description Server-side rendering SSR in @angular/platform-server fails to properly escape matching ancestor closing tags when serializing...
Security Bulletin: HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response
Summary Upgrade to InformixHQ 3.3.2 Vulnerability Details CVEID:CVE-2026-68945 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins...
CVE-2026-101895
creationtimestamp| type| source ---|---|--- 2026-09-09 20:36:09+00:00| published-proof-of-concept| https://github.com/angular/angular/security/advisories/GHSA-f67j-2jqw-jpq7...
Security Bulletin: the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust translation file to replace a static handler with executable JavaScript
Summary Upgrade to InformixHQ 3.3.2 Vulnerability Details CVEID:CVE-2026-69151 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline...
Security Bulletin: IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and common-joins (CVE-2026-69151, CVE-2026-68945)
Summary IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and comma-joins CVE-2026-69151, CVE-2026-68945 The affected versions have been updated within IBM Applin...
org.webjars.npm:ajv (>=8.17.1, <=8.20.0), org.webjars.npm:ajv-formats (>=2.1.1, <=3.0.1) +19 more potentially affected by CVE-2026-84292 via org.webjars.npm:fast-uri (3.1.5)
org.webjars.npm:fast-uri MAVEN version 3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:fast-uri and may be impacted: - org.webjars.npm:ajv =8.17.1, =2.1.1, =0.1902.8, =19.2.8, =19.2.8, =2.0.44, =0.10.434, =0.3.16, =0.10.14, =0.25....
MAL-2026-15669 Malicious code in kendo-angular-window (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012a21168890d2cc7482e8f4191dd4d1ee848314bdf7bc0970be32fb87a7ef25 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in kendo-angular-window (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012a21168890d2cc7482e8f4191dd4d1ee848314bdf7bc0970be32fb87a7ef25 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CLSA-2026-1787822123 TuxCare security update for angular (14 CVEs)
TuxCare rebuilt angular to address 14 CVEs. Fixed in 1.4.7-tuxcare.1...
Exploit for Cross-site Scripting in Angular Angular_Cli
CVE-2026-32635: Angular i18n Attribute XSS - Mitigation & Dete...
CLSA-2026-1786794013 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 18 @angular packages to address 2 CVEs. Fixed in 5.1.2-tuxcare.4...
CLSA-2026-1786794014 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 16 @angular packages to address 1 CVE. Fixed in 4.3.5-tuxcare.5...