Skip to content
OpenAdvisories

Product · Google

AngularJS

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-11998

    AngularJS XSS via SCE resource URL sanitization bypass

    A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted…

    Google AngularJS angular.js angular.js Debian Ubuntu npm