@angular/compiler (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @angular/compiler, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2026-32635 — CVSS 9.0 (critical): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-22610 — CVSS 6.1 (medium): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-50557 — CVSS 6.1 (medium): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2026-54265 — CVSS 6.1 (medium): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…
• CVE-2025-66412 — CVSS 5.4 (medium): Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior…