{"action":"Upgrade @angular/compiler to 20.3.28 or later.","affected":[{"fixed":"22.1.0","introduced":"22.0.0"},{"fixed":"21.2.20","introduced":"21.0.0"},{"fixed":"20.3.28","introduced":"20.0.0"},{"introduced":"0","last_affected":"19.2.25"}],"component":"@angular/compiler","cve_ids":["CVE-2026-88057"],"ecosystem":"npm","epss":0.00372,"exploited":false,"fixed_versions":["22.1.0","21.2.20","20.3.28"],"ghsa_id":"GHSA-hh8m-fm6v-7cvg","id":"tcs_01M5KFV5VHT7E10KZBKDF1NGX0","modified_at":"2026-09-10T20:30:04.438198416Z","published_at":"2026-09-10T20:18:02Z","references":["https://osv.dev/vulnerability/GHSA-hh8m-fm6v-7cvg","https://github.com/angular/angular/security/advisories/GHSA-hh8m-fm6v-7cvg","https://github.com/angular/angular/issues/69550","https://github.com/angular/angular/pull/69558","https://github.com/angular/angular/commit/2f96c8020f85ccb715a76de4b79a0c680c2c7264","https://github.com/angular/angular/commit/6afe6fa781c2f0931f0aedd729b9884a8fe212ee","https://github.com/angular/angular/commit/6caa298dee58319b2d674dc91364e26ffe3ecb2b","https://github.com/angular/angular","https://github.com/angular/angular/releases/tag/v20.3.28","https://github.com/angular/angular/releases/tag/v21.2.20","https://github.com/angular/angular/releases/tag/v22.1.0"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hh8m-fm6v-7cvg#npm/@angular/compiler","url":"https://osv.dev/vulnerability/GHSA-hh8m-fm6v-7cvg"}],"summary":"Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler"}