Threats Tagged 'cve-2026-88057'
View all threats tagged with 'cve-2026-88057'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-88057'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in Angular's @angular/core and @angular/compiler allows sanitization bypass via directive host bindings on certain concrete host elements. This occurs because the Angular compiler incorrectly determines the security context for directive host bindings based on the directive or component selector rather than the actual host element. This flaw can lead to untrusted inputs, such as javascript: URLs, being inserted into DOM attributes without sanitization, enabling Cross-Site Scripting (XSS) attacks. The issue affects multiple Angular versions prior to patched releases. Official patches are available in versions 22.1.0, 21.2.20, and 20.3.28. Users are advised to sanitize inputs explicitly or restrict URL schemes as a workaround. Join the discussion | GCVE Database | 09/10/2026, 20:18:02 UTC Added: 09/10/2026, 22:04:14 UTC |
Showing 1 to 1 of 1 result