Skip to content
OpenAdvisories

Product · Progress Software

Kendo UI for Angular

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.1
    CVE-2026-106144

    Prototype Pollution in Progress Software Kendo UI for Angular

    Prototype Pollution in the Scheduler component (@progress/kendo-angular-scheduler and @progress/kendo-angular-common) in Progress Software Kendo UI for Angular versions prior to 25.1.0 allows a high-privileged attacker who can control a field path processed b…

    Progress Software Kendo UI for Angular
  • Medium 5.4
    CVE-2026-106141

    Cross-Site Scripting in Progress Software Kendo UI for Angular

    Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another us…

    Progress Software Kendo UI for Angular
  • Medium 5.4
    CVE-2026-106135

    Cross-Site Scripting in Progress Software Kendo UI for Angular

    Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Chat messages to execute arbitrary JavaScript in an…

    Progress Software Kendo UI for Angular
  • Medium 5.4
    CVE-2025-6725

    Cross-Site Scripting (XSS) in PdfViewer

    In the PdfViewer component, a Cross-Site Scripting (XSS) vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered.

    Progress Software Kendo UI for jQuery KendoReact Kendo UI for Angular