CVE-2026-50556

Что произошло

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2.25, a Cross-Site Scripting (XSS) vulnerability exists in @angular/platform-server's DOM emulation dependency (domino) when serializing the content of elements. When rendering dynamic text content inside a element via template bindings (such as {{ value }} or [textContent]), the template engine expects the browser to render the content safely. Under Server-Side Rendering (SSR), domino is configured with scripting enabled, meaning is treated as a raw-text element. However, domino's serializer completely omitted from the list of raw-text elements requiring closing-tag escaping during DOM serialization. As a result, any occurrence of in the bound dynamic text was never escaped under any circumstances. The unescaped closing tag was serialized directly into the output HTML (e.g. alert(1)). When parsed by a browser, it closes the block early, allowing the injected block to execute in the user's browser context, causing same-origin Cross-Site Scripting (XSS). This vulnerability is fixed in 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2.25.

Что делать

dpkg-query -W -f='${Package}	${Version}\n'

rpm -qa --qf '%{NAME}\t%{VERSION}-%{RELEASE}\n'

Get-HotFix | Select-Object HotFixID, InstalledOn

Продукты и затронутые версии

{
  "status": "affected",
  "version": ">= 22.0.0-next.0, < 22.0.0-rc.2"
}

{
  "status": "affected",
  "version": ">= 21.0.0-next.0, < 21.2.16"
}

{
  "status": "affected",
  "version": ">= 20.0.0-next.0, < 20.3.24"
}

{
  "status": "affected",
  "version": ">= 19.0.0-next.0, < 19.2.25"
}

{
  "status": "affected",
  "version": "<= 18.2.14"
}

cpe:/o:redhat:enterprise_linux:8

cpe:/a:redhat:jboss_fuse:7

{
  "status": "affected",
  "version": "*",
  "versionEndExcluding": "22.0.0-rc.2",
  "versionStartIncluding": "22.0.0-next.0"
}

{
  "status": "affected",
  "version": "*",
  "versionEndExcluding": "21.2.16",
  "versionStartIncluding": "21.0.0-next.0"
}

{
  "status": "affected",
  "version": "*",
  "versionEndExcluding": "20.3.24",
  "versionStartIncluding": "20.0.0-next.0"
}

{
  "status": "affected",
  "version": "*",
  "versionEndExcluding": "19.2.25",
  "versionStartIncluding": "19.0.0-next.0"
}

{
  "status": "affected",
  "version": "*",
  "versionEndIncluding": "18.2.14"
}

CVSS: оценки и векторы

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Источники и ссылки

{
  "cwes": [
    "cve"
  ],
  "epss": {
    "source": "epss",
    "received_at": "2026-11-04T21:17:58.099241+00:00"
  },
  "title": {
    "source": "cve",
    "received_at": "2026-10-28T21:23:16.717971+00:00"
  },
  "scores": [
    "cve"
  ],
  "status": {
    "source": "cve",
    "received_at": "2026-10-28T21:23:16.717971+00:00"
  },
  "affected": [
    "cve",
    "osv"
  ],
  "published": {
    "source": "cve",
    "received_at": "2026-10-28T21:23:16.717971+00:00"
  },
  "solutions": [],
  "percentile": {
    "source": "epss",
    "received_at": "2026-11-04T21:17:58.099241+00:00"
  },
  "references": [
    "cve",
    "osv"
  ],
  "description": {
    "source": "cve",
    "received_at": "2026-10-28T21:23:16.717971+00:00"
  },
  "workarounds": [],
  "configurations": []
}

Хронология записи

1. Данные обновлены05.11.2026, 00:17
2. Данные обновлены04.11.2026, 00:13
3. Данные обновлены03.11.2026, 00:13
4. Данные обновлены02.11.2026, 15:15
5. Данные обновлены02.11.2026, 00:11
6. Данные обновлены31.10.2026, 11:58
7. Данные обновлены29.10.2026, 12:31
8. Опубликована29.10.2026, 00:23

Личная заметка и статус

Другие CVE того же продукта