tocsin

npm/@angular/core CVE-2026-69151: high, EPSS 0.33%

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Action: Upgrade @angular/core to 20.3.27 or later.

npm i @angular/core@22.0.1
npm i @angular/core@21.2.19
npm i @angular/core@20.3.27

Affected

introducedfixedlast affected
22.0.0-next.022.0.1-
21.0.0-next.021.2.19-
20.0.0-next.020.3.27-
0-19.2.25

Fixed versions

22.0.121.2.1920.3.27

Sources

CVE-2026-69151 · published · modified · JSON