tocsin

npm/@angular/compiler CVE-2026-88057: medium, EPSS 0.37%

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Action: Upgrade @angular/compiler to 20.3.28 or later.

npm i @angular/compiler@22.1.0
npm i @angular/compiler@21.2.20
npm i @angular/compiler@20.3.28

Affected

introducedfixedlast affected
22.0.022.1.0-
21.0.021.2.20-
20.0.020.3.28-
0-19.2.25

Fixed versions

22.1.021.2.2020.3.28

Sources

CVE-2026-88057 · published · modified · JSON