Angular: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• High 8.8
  CVE-2026-50168

  Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/platform-server package allows remote attackers t…

  angular angular angular.js angular.js Debian Ubuntu npm
  Jun 22, 2026
• High 8.6
  CVE-2026-50555

  Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2.25, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-ser…

  angular angular angular.js angular.js Debian Ubuntu npm
  Jun 22, 2026
• High 8.6
  CVE-2026-50556

  Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2.25, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-ser…

  angular angular angular.js angular.js Debian Ubuntu npm
  Jun 22, 2026
• High 8.6
  CVE-2026-54267

  Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimize client-side bootstrap in Server-Side Rendered (SSR) environments, Angular su…

  angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Jun 22, 2026
• High 8.3
  CVE-2026-54264

  Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an information disclosure vulnerability exists in the @angular/service-worker package of…

  angular angular angular.js angular.js Debian Ubuntu npm
  Jun 22, 2026
• High 8.2
  CVE-2026-50170

  Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a vulnerability was discovered in @angular/common when Server-Side Renderi…

  angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Jun 22, 2026
• High 8.2
  CVE-2026-50171

  Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service (DoS) vulnerability exists in the @angular/common pack…

  angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Jun 22, 2026
• Medium 5.7
  CVE-2026-50169

  Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity o…

  angular angular angular.js angular.js Debian Ubuntu npm
  Jun 22, 2026
• Medium 5.7
  CVE-2026-50184

  Angular: Request Credential & Cache Policy Stripping in Angular Service Worker

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity …

  angular angular angular.js angular.js Debian Ubuntu npm
  Jun 22, 2026
• Medium 5.3
  CVE-2026-50557

  Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassi…

  angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Jun 22, 2026
• Medium 5.3
  CVE-2026-52725

  Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/core package allows bypassing script-execution re…

  angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Jun 22, 2026

Revision history

1. 2026-08-31 #3

   Neue Updates von Dell aufgenommen

2. 2026-06-22 #2

   Referenz(en) aufgenommen: EUVD-2026-38261, EUVD-2026-38274, EUVD-2026-38293, EUVD-2026-38289, EUVD-2026-38257, EUVD-2026-38295, EUVD-2026-38292, EUVD-2026-38271, EUVD-2026-38296, EUVD-2026-38291, EUVD-2026-38298

3. 2026-06-15 #1

   Initiale Fassung

References

• GitHub Security Advisory GHSA-692r-grfm-v8x7 vom 2026-06-15
  https://github.com/advisories/GHSA-692r-grfm-v8x7
• GitHub Security Advisory GHSA-95qp-cmmw-mgqv vom 2026-06-15
  https://github.com/advisories/GHSA-95qp-cmmw-mgqv
• GitHub Security Advisory GHSA-f3m7-gqxr-g87x vom 2026-06-15
  https://github.com/advisories/GHSA-f3m7-gqxr-g87x
• GitHub Security Advisory GHSA-gv2q-mqqv-365m vom 2026-06-15
  https://github.com/advisories/GHSA-gv2q-mqqv-365m
• GitHub Security Advisory GHSA-gxx4-3xcv-f8qx vom 2026-06-15
  https://github.com/advisories/GHSA-gxx4-3xcv-f8qx
• GitHub Security Advisory GHSA-hqr9-c56f-3x7f vom 2026-06-15
  https://github.com/advisories/GHSA-hqr9-c56f-3x7f
• GitHub Security Advisory GHSA-p3vc-36g9-x9gr vom 2026-06-15
  https://github.com/advisories/GHSA-p3vc-36g9-x9gr
• GitHub Security Advisory GHSA-q6f4-qqrg-jv6x vom 2026-06-15
  https://github.com/advisories/GHSA-q6f4-qqrg-jv6x
• GitHub Security Advisory GHSA-qxh6-94w6-9r5p vom 2026-06-15
  https://github.com/advisories/GHSA-qxh6-94w6-9r5p
• GitHub Security Advisory GHSA-rgjc-h3x7-9mwg vom 2026-06-15
  https://github.com/advisories/GHSA-rgjc-h3x7-9mwg
• GitHub Security Advisory GHSA-xrxm-cp7j-8xf6 vom 2026-06-15
  https://github.com/advisories/GHSA-xrxm-cp7j-8xf6
• Dell Security Advisory DSA-2026-385 vom 2026-08-31
  https://www.dell.com/support/kbdoc/de-de/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities