Angular : Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vuln - CVE-2026-88058 - Vulnerability Database

Angular

Angular : Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vuln - CVE-2026-88058

Medium

Reference: CVE-2026-88058

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-88058

Title: Angular : Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vuln

Overview:

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30 21.2.22 and 22.1.4 Angular server-side rendering (SSR) in angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestor