pkg:npm/@angular/core

All known vulnerabilities

• CRITICAL9.0CVE-2026-32635Angular vulnerable to XSS in i18n attribute bindings
  >= 22.0.0-next.0, < 22.0.0-next.3
• MEDIUM6.1CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
  >= 21.0.0-next.0, < 21.2.15
• MEDIUM6.1CVE-2026-52725@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)
  >= 21.0.0-next.0, < 21.2.15
• MEDIUM6.1Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
  >= 22.0.0-next.0, < 22.0.1
• MEDIUM6.1Angular i18n vulnerable to Cross-Site Scripting
  >= 21.2.0-next.0, < 21.2.0
• MEDIUM5.4Angular vulnerable to Cross-site Scripting
  >= 11.0.0, < 11.0.5
• —Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
  >= 21.1.0-next.0, < 21.1.0-rc.0