tocsin

CVE-2026-52725

1 advisory.

npm/@angular/core CVE-2026-52725: medium 6.1

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

Action: Upgrade @angular/core to 19.2.23 or later.

npm i @angular/core@21.2.15
npm i @angular/core@22.0.0-rc.2
npm i @angular/core@19.2.23
npm i @angular/core@20.3.22

Affected

introducedfixedlast affected
21.0.0-next.021.2.15-
22.0.0-next.022.0.0-rc.2-
19.0.0-next.019.2.23-
0-18.2.14
20.0.0-next.020.3.22-

Fixed versions

21.2.1522.0.0-rc.219.2.2320.3.22

Sources

CVE-2026-52725 · published · modified · JSON