@angular/compiler vulnerabilities
CVEs whose affected-version data names the @angular/compiler package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-69151HighAngular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
▾ Twilightangular · @angular/compilerEPSS 0.20%via GHSA
CVE-2026-50557MediumAngular: Template and Attribute Namespace Sanitization Bypass (XSS)
Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
▾ Sunlitangular · @angular/coreEPSS 0.34%via GHSA
CVE-2026-54265Medium@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)
@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)
▾ Sunlitangular · @angular/compilerEPSS 0.34%via GHSA