RCE in Angular
CVE-2026-50178
The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the tooltip Markdown renderer with the isTrusted: true option (l…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Angular — versions < 21.2.4
- Angular Angular.ng-template — versions < 21.2.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)