tocsin

CVE-2026-50557

2 advisories.

npm/@angular/core CVE-2026-50557: medium 6.1

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Action: Upgrade @angular/core to 19.2.22 or later.

npm i @angular/core@21.2.15
npm i @angular/core@22.0.0-rc.2
npm i @angular/core@20.3.22
npm i @angular/core@19.2.22

Affected

introducedfixedlast affected
21.0.0-next.021.2.15-
22.0.0-next.022.0.0-rc.2-
20.0.0-next.020.3.22-
19.0.0-next.019.2.22-
0-18.2.14

Fixed versions

21.2.1522.0.0-rc.220.3.2219.2.22

Sources

CVE-2026-50557 · published · modified · JSON

npm/@angular/compiler CVE-2026-50557: medium 6.1

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Action: Upgrade @angular/compiler to 19.2.22 or later.

npm i @angular/compiler@21.2.15
npm i @angular/compiler@22.0.0-rc.2
npm i @angular/compiler@20.3.22
npm i @angular/compiler@19.2.22

Affected

introducedfixedlast affected
21.0.0-next.021.2.15-
22.0.0-next.022.0.0-rc.2-
20.0.0-next.020.3.22-
19.0.0-next.019.2.22-
0-18.2.14

Fixed versions

21.2.1522.0.0-rc.220.3.2219.2.22

Sources

CVE-2026-50557 · published · modified · JSON