tocsin

CVE-2026-22610

2 advisories.

npm/@angular/compiler CVE-2026-22610: high

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Action: Upgrade @angular/compiler to 19.2.18 or later.

npm i @angular/compiler@21.1.0-rc.0
npm i @angular/compiler@21.0.7
npm i @angular/compiler@20.3.16
npm i @angular/compiler@19.2.18

Affected

introducedfixedlast affected
21.1.0-next.021.1.0-rc.0-
21.0.0-next.021.0.7-
20.0.0-next.020.3.16-
19.0.0-next.019.2.18-
0-18.2.14

Fixed versions

21.1.0-rc.021.0.720.3.1619.2.18

Sources

CVE-2026-22610 · published · modified · JSON

npm/@angular/core CVE-2026-22610: high

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Action: Upgrade @angular/core to 19.2.18 or later.

npm i @angular/core@21.1.0-rc.0
npm i @angular/core@21.0.7
npm i @angular/core@20.3.16
npm i @angular/core@19.2.18

Affected

introducedfixedlast affected
21.1.0-next.021.1.0-rc.0-
21.0.0-next.021.0.7-
20.0.0-next.020.3.16-
19.0.0-next.019.2.18-
0-18.2.14

Fixed versions

21.1.0-rc.021.0.720.3.1619.2.18

Sources

CVE-2026-22610 · published · modified · JSON