CRITICAL9.0CVE-2026-32635Angular vulnerable to XSS in i18n attribute bindings >= 22.0.0-next.0, < 22.0.0-next.3
MEDIUM6.1CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS) >= 21.0.0-next.0, < 21.2.15
MEDIUM6.1CVE-2026-52725@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS) >= 21.0.0-next.0, < 21.2.15
MEDIUM6.1Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
>= 22.0.0-next.0, < 22.0.1
MEDIUM6.1Angular i18n vulnerable to Cross-Site Scripting
>= 21.2.0-next.0, < 21.2.0
MEDIUM5.4Angular vulnerable to Cross-site Scripting
>= 11.0.0, < 11.0.5
—Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
>= 21.1.0-next.0, < 21.1.0-rc.0