Skip to content
OpenAdvisories
High WID-SEC-2026-2632 3 CVEs

Angular: Mehrere Schwachstellen

Published Aug 3, 2026 · Updated Sep 13, 2026 · Revision 2 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Angular ausnutzen, um Dateien zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.

Product

Angular ist ein TypeScript-basiertes Front-End-Webapplikationsframework. Es ist eine Weiterentwicklung des JavaScript basierten AngularJS.

Vulnerabilities 3

  • High 8.8
    CVE-2026-68945

    Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinc…

    angular angular common katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • High 8.6
    CVE-2026-69149

    Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-server's DOM emul…

    angular angular platform-server angular.js Debian Ubuntu npm
  • High 7.6
    CVE-2026-69151

    Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler …

    angular angular core compiler Debian Ubuntu Wolfi npm

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References