CVE-2026-49241 | Angular up to 21.2.3 require command-line cross site scripting

June 22, 2026 Yanac

A vulnerability identified as problematic has been detected in Angular up to 21.2.3. The impacted element is the function require. The manipulation of the argument command-line leads to cross site scripting.

This vulnerability is documented as CVE-2026-49241. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More