CVE Explorer

CVE-2026-50555

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2.25, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-server's DOM emulation dependency (domino) when serializing the content of raw-text elements (such as <script>, <style>, and <iframe>). domino supports escaping raw-text elements during serialization to prevent closing-tag breakout. However, a

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b5e39c05d8212e073039a96d43b310f95d2d9681361cd6fb858c575f9bd801eb

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"angular","vendor":"angular","versions":[{"status":"affected","version":">= 22.0.0-next.0, < 22.0.0-rc.2"},{"status":"affected","version":">= 21.0.0-next.0, < 21.2.16"},{"status":"affected","version":">= 20.0.0-next.0, < 20.3.24"},{"status":"affected","version":">= 19.0.0-next.0, < 19.2.25"},{"status":"affected","version":"<= 18.2.14"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:81f81e9fbe2c7f5d63b91bcea6221aac22e503c6f917fc163c8448181b655bd2 · sha256:9f2540dd20241db2… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.6,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:81f81e9fbe2c7f5d63b91bcea6221aac22e503c6f917fc163c8448181b655bd2 · sha256:9f2540dd20241db2… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion

{"cweId":"CWE-79","description":"CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:81f81e9fbe2c7f5d63b91bcea6221aac22e503c6f917fc163c8448181b655bd2 · sha256:9f2540dd20241db2… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"name":"https://github.com/angular/angular/security/advisories/GHSA-hqr9-c56f-3x7f","tags":["x_refsource_CONFIRM"],"url":"https://github.com/angular/angular/security/advisories/GHSA-hqr9-c56f-3x7f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:81f81e9fbe2c7f5d63b91bcea6221aac22e503c6f917fc163c8448181b655bd2 · sha256:9f2540dd20241db2… · /containers/cna/references/0

{"name":"https://github.com/angular/domino/pull/29","tags":["x_refsource_MISC"],"url":"https://github.com/angular/domino/pull/29"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:81f81e9fbe2c7f5d63b91bcea6221aac22e503c6f917fc163c8448181b655bd2 · sha256:9f2540dd20241db2… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer