DEBIAN-CVE-2026-50556
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-50556
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2026-50556.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2026-50556
- Upstream
- Published
- 2026-06-22T18:16:43Z
- Modified
- 2026-09-01T16:06:48Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2.25, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-server's DOM emulation dependency (domino) when serializing the content of in the bound dynamic text was never escaped under any circumstances. The unescaped closing tag was serialized directly into the output HTML (e.g. ). When parsed by a browser, it closes the
- References
Affected packages
Debian:12 / angular.js
Package
- Name
- angular.js
- Purl
- pkg:deb/debian/angular.js?arch=source&distro=bookworm
Debian:13 / angular.js
Package
- Name
- angular.js
- Purl
- pkg:deb/debian/angular.js?arch=source&distro=trixie