@angular/core

npm · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilerCVE-2026-88057 · GHSA-HH8M-FM6V-7CVG	@angular/compiler @angular/core	npmRed Hat	Medium	Fix reported	2026-09-11
Angular i18n vulnerable to Cross-Site ScriptingCVE-2026-27970 · GHSA-PRJF-86W9-MFQV	@angular/core Red Hat Enterprise Linux 10/ceph	npmRed Hat	High	Fix reported	2026-09-10
Angular Client Hydration DOM Clobbering & Response-Cache PoisoningCVE-2026-54267 · GHSA-RGJC-H3X7-9MWG	@angular/core	npm	High	Fix reported	2026-09-10
Angular: Template and Attribute Namespace Sanitization Bypass (XSS)CVE-2026-50557 · GHSA-F3M7-GQXR-G87X	@angular/compiler @angular/core	npmRed Hat	Medium	Fix reported	2026-09-10
@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)CVE-2026-52725 · GHSA-692R-GRFM-V8X7	@angular/core Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle	npmRed Hat	Medium	Fix reported	2026-09-10
Angular has XSS Vulnerability via Unsanitized SVG Script AttributesCVE-2026-22610 · GHSA-JRMJ-C5CX-3CW6	@angular/compiler @angular/core	npmRed Hat	High	Fix reported	2026-09-10
Angular vulnerable to Cross-site ScriptingCVE-2021-4231 · GHSA-C75V-2VQ8-878F	@angular/core .NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet	npmRed Hat	Medium	Fix reported	2026-09-10
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributesCVE-2026-69151 · GHSA-JJ27-H5HQ-8X99	@angular/compiler @angular/core	npmRed Hat	High	Fix reported	2026-08-03
Angular vulnerable to XSS in i18n attribute bindingsCVE-2026-32635 · GHSA-G93W-MFHG-P222	@angular/compiler @angular/core	npmRed Hat	High	Fix reported	2026-05-07