Angular Language Service vulnerabilities

2 known vulnerabilities in Angular Language Service from Angular. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  angular: Improper Neutralization of Input During Web Page Generation

  CVE-2026-50178Jun 22, 2026Angular

  The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the tooltip Markdown renderer with the isTrusted: true option (located in client/src/

• 8.8 High severity

  angular: Improper Neutralization of Input During Web Page Generation

  CVE-2026-49241Jun 22, 2026Angular

  The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path direc