Changeflow GovPing Data Privacy & Cybersecurity Angular XSS Vulnerability Advisory
Priority review Notice Added Final

Angular XSS Vulnerability Advisory

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published March 15th, 2026
Detected March 16th, 2026
Email

Summary

CERT-Bund has issued a security advisory for Angular, detailing a Cross-Site Scripting (XSS) vulnerability with a CVSS score of 8.0. The advisory affects specific versions of open-source Angular and provides mitigation information.

View original document View source feed page

What changed

CERT-Bund has released a security advisory (WID-SEC-2026-0728) concerning a critical Cross-Site Scripting (XSS) vulnerability in Angular, a popular front-end web application framework. The vulnerability, assigned a CVSS Base Score of 8.0, allows remote, authenticated attackers to perform XSS attacks. The advisory specifically impacts open-source Angular versions prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20.

Developers and organizations utilizing affected Angular versions should immediately review the advisory and apply the recommended mitigations or update to patched versions to prevent potential exploitation. Failure to address this vulnerability could lead to compromised user sessions, data theft, or other malicious activities on affected web applications. The advisory also notes that the vulnerability is present across various operating systems including Linux, UNIX, and Windows.

What to do next

  1. Review Angular security advisory WID-SEC-2026-0728
  2. Update affected Angular versions to patched releases
  3. Implement recommended mitigation strategies

Source document (simplified)

[WID-SEC-2026-0728] Angular: Schwachstelle ermöglicht Cross-Site Scripting CVSS Base Score 8.0 (hoch) CVSS Temporal Score 7.0 (hoch) Remoteangriff ja Datum 15.03.2026 Stand 16.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Linux
  • Sonstiges
  • UNIX
  • Windows

Produktbeschreibung

Angular ist ein TypeScript-basiertes Front-End-Webapplikationsframework. Es ist eine Weiterentwicklung des JavaScript basierten AngularJS.

Produkte

15.03.2026
- Open Source Angular <22.0.0-next.3

  • Open Source Angular <21.2.4

  • Open Source Angular <20.3.18

  • Open Source Angular <19.2.20

Angriff

Angriff

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Angular ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for wid.cert-bund.de Langflow Vulnerabilities Allow Code Execution and Security Bypass
Urgent Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de OpenCTI Vulnerability Allows Bypassing Security Measures
Priority review Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de Vercel Next.js Vulnerabilities Allow DoS or Security Bypass
Priority review Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for news.dli.mt.gov Montana DLI Warns About Phishing Scam
Priority review Mar 17, 2026 • news.dli.mt.gov • Labor & Employment
Favicon for www.maine.gov Maine Revenue Services Warns of W-2 Phishing Scams
Priority review Mar 17, 2026 • revenue • Tax
Favicon for www.cert.ssi.gouv.fr CERT-FR: Multiple vulnerabilities in Mattermost Server
Priority review Mar 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-Bund
Published
March 15th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Technology companies
Geographic scope
de

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Software Vulnerabilities Web Security

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 163 Consumer Protection 29 Courts & Legal 206 Data Privacy & Cybersecurity 58 Defense & National Security 48 Education 20 Energy 94 Environment 81 Government & Legislation 240 Healthcare 104 Housing 15 Immigration 8 Insurance 16 Labor & Employment 104 Pharma & Drug Safety 68 Securities & Markets 69 Tax 48 Telecom & Technology 34 Trade & Sanctions 113 Transportation 53

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.