8.6
Élevée
CVE-2026-69149 Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other…
Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-server's DOM emulation dependency (domino) when serializing the content of fallback raw-content elements (<iframe>, <noembed>, <noframes>, and <noscript>). This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.7.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| angular 22.0 | 22.0.0-next.0 → < 22.0.7 | 22.0.7 |
| angular 21.0 | 21.0.0-next.0 → < 21.2.19 | 21.2.19 |
| angular 20.3 | premières → < 20.3.27 | 20.3.27 |
| platform-server 22.0 | 22.0.0-next.0 → < 22.0.7 | 22.0.7 |
| platform-server 21.0 | 21.0.0-next.0 → < 21.2.19 | 21.2.19 |
| platform-server 20.3 | premières → < 20.3.27 | 20.3.27 |
Autres CVE de angular
Les 38 CVE de angular →
CVE-2026-111753
Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
5.9
Moyenne
CVE-2026-111751
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other…
8.2
Élevée
CVE-2026-111754
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other…
5.1
Moyenne
CVE-2026-111752
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other…
8.2
Élevée