{"id":"CVE-2026-69151","aliases":["GHSA-jj27-h5hq-8x99"],"url":"https://o3.security/vulnerability/CVE-2026-69151","summary":"Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes","details":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust translation file to replace a static handler with executable JavaScript. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.1.","published":"2026-08-03T16:23:34.121Z","modified":"2026-08-13T04:02:59.568376633Z","cvss":null,"epss":{"score":0.00199,"percentile":0.09941,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"@angular/compiler","fixedVersion":"22.0.1"},{"ecosystem":"npm","name":"@angular/compiler","fixedVersion":"21.2.19"},{"ecosystem":"npm","name":"@angular/compiler","fixedVersion":"20.3.27"},{"ecosystem":"npm","name":"@angular/compiler","fixedVersion":null},{"ecosystem":"npm","name":"@angular/core","fixedVersion":"22.0.1"},{"ecosystem":"npm","name":"@angular/core","fixedVersion":"21.2.19"},{"ecosystem":"npm","name":"@angular/core","fixedVersion":"20.3.27"},{"ecosystem":"npm","name":"@angular/core","fixedVersion":null}],"fix":{"url":"https://github.com/angular/angular/commit/417a4071a776464d549509ed3aec121dbd2fda5e","label":"angular/angular@417a407"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69151.json"},{"type":"ADVISORY","url":"https://github.com/angular/angular/security/advisories/GHSA-jj27-h5hq-8x99"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69151"},{"type":"FIX","url":"https://github.com/angular/angular/commit/417a4071a776464d549509ed3aec121dbd2fda5e"},{"type":"FIX","url":"https://github.com/angular/angular/commit/6c41f5ca01c0ae045fc7d929b72853a11eb55865"},{"type":"FIX","url":"https://github.com/angular/angular/pull/68821"},{"type":"FIX","url":"https://github.com/angular/angular/pull/69306"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-13T04:02:59.568376633Z"}}