@angular/compiler

npm · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilerCVE-2026-88057 · GHSA-HH8M-FM6V-7CVG	@angular/compiler @angular/core	npmRed Hat	Medium	Fix reported	2026-09-11
@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)CVE-2026-54265 · GHSA-58W9-8G37-X9V5	@angular/compiler Red Hat Advanced Cluster Management for Kubernetes 2/core	npmRed Hat	Medium	Fix reported	2026-09-10
Angular: Template and Attribute Namespace Sanitization Bypass (XSS)CVE-2026-50557 · GHSA-F3M7-GQXR-G87X	@angular/compiler @angular/core	npmRed Hat	Medium	Fix reported	2026-09-10
Angular has XSS Vulnerability via Unsanitized SVG Script AttributesCVE-2026-22610 · GHSA-JRMJ-C5CX-3CW6	@angular/compiler @angular/core	npmRed Hat	High	Fix reported	2026-09-10
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML AttributesCVE-2025-66412 · GHSA-V4HV-RGFQ-GP49	@angular/compiler Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	npmRed Hat	High	Fix reported	2026-09-10
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributesCVE-2026-69151 · GHSA-JJ27-H5HQ-8X99	@angular/compiler @angular/core	npmRed Hat	High	Fix reported	2026-08-03
Angular vulnerable to XSS in i18n attribute bindingsCVE-2026-32635 · GHSA-G93W-MFHG-P222	@angular/compiler @angular/core	npmRed Hat	High	Fix reported	2026-05-07