XSS in @Angular Compiler
CVE-2026-69151
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i1…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- @Angular Compiler — versions >= 22.0.0-next.0, < 22.0.1, >= 21.0.0-next.0, < 21.2.19, < 20.3.27
- @Angular Core — versions >= 22.0.0-next.0, < 22.0.1, >= 21.0.0-next.0, < 21.2.19, < 20.3.27
- Angular — versions >= 22.0.0-next.0, < 22.0.1, >= 21.0.0-next.0, < 21.2.19, < 20.3.27
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)