THREAT OPS › Threat News › [GHSA] GHSA-vpx6-8pjr-4g3v (high) — Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
[GHSA] GHSA-vpx6-8pjr-4g3v (high) — Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
GHSA-vpx6-8pjr-4g3v Severity: high CVE: CVE-2026-69149
Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
A Cross-Site Scripting (XSS) vulnerability exists in `@angular/platform-server`'s DOM emulation dependency (`domino`) when serializing the content of fallback raw-content elements (`<iframe>`, `<noembed>`, `<noframes>`, and `<noscript>`).
Wh
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2026-69149cve
Original source: https://github.com/advisories/GHSA-vpx6-8pjr-4g3v