CVE-2026-50555 | Angular up to 18.2.14/19.2.24/20.3.23/21.2.15 Unicode Character cross site scripting (GHSA-hqr9-c56f-3x7f)

A vulnerability labeled as problematic has been found in Angular up to 18.2.14/19.2.24/20.3.23/21.2.15. This impacts an unknown function of the component Unicode Character Handler. Such manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-50555. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More