Skip to content
OpenAdvisories
High WID-SEC-2026-2038 5 CVEs

Angular: Mehrere Schwachstellen

Published Jun 22, 2026 · Updated Aug 31, 2026 · Revision 2 · de-DE

Vendor: Dell Product: Secure Connect Gateway Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Angular ausnutzen, um beliebigen Programmcode auszuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.

Product

Angular ist ein TypeScript-basiertes Front-End-Webapplikationsframework. Es ist eine Weiterentwicklung des JavaScript basierten AngularJS.

Vulnerabilities 5

  • High 8.8
    CVE-2026-54266

    Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, Angular's HttpTransferCache caches HTTP requests made during Server-Side Rendering (SSR)…

    angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  • High 8.7
    CVE-2026-49241

    Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension

    The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path dire…

    angular angular angular.js Ubuntu
  • High 8.7
    CVE-2026-50178

    Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension

    The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the tooltip Markdown renderer with the isTrusted: true option (located in client/src…

    angular angular Angular.ng-template angular.js Ubuntu
  • High 8.2
    CVE-2026-54268

    Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial of Service (DoS) vulnerability exists in the @angular/common package of the Ang…

    angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  • Medium 5.3
    CVE-2026-54265

    Angular: Two-Way Property Binding Sanitization Bypass (XSS)

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an issue in the @angular/compiler package allows bypassing DOM property sanitization thr…

    angular angular katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm

Revision history

  1. #2

    Neue Updates von Dell aufgenommen

  2. #1

    Initiale Fassung

References