Security Advisory

CVE-2026-69151

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-03 16:23:34
Last updated 2026-08-03 21:19:24
Assigner GitHub_M
CVSS score not scored
State PUBLISHED

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust translation file to replace a static handler with executable JavaScript. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.1.