CVE-2026-22610 | Angular up to 19.2.17/20.3.15/21.0.6 cross site scripting (GHSA-jrmj-c5cx-3cw6)

January 10, 2026 Yanac

A vulnerability has been found in Angular up to 19.2.17/20.3.15/21.0.6 and classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-22610. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More