Filtered by vendor @angular Subscriptions
Filtered by product Core Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69151 2 @angular, Angular 3 Core, Angular, Compiler 2026-08-05 8.1 High
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust translation file to replace a static handler with executable JavaScript. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.1.