{"schemaVersion":3,"id":"CVE-2026-50557","aliases":["UBUNTU-CVE-2026-50557","DEBIAN-CVE-2026-50557","CGA-24hg-g6w3-37r3","CGA-2p4r-qm2j-9hpv","CGA-2p63-6x58-xcvc","CGA-3w2p-8fpj-hgv4","CGA-3w2p-9hwr-39v8","CGA-43vx-mff3-qq3v","CGA-4c5m-mj38-49gx","CGA-4rq6-8vvx-mmjq","CGA-4v96-j2wr-7vxv","CGA-4w97-cv6f-4j8h","CGA-5923-h7xm-7w7r","CGA-5fh9-3xvc-x2mv","CGA-5mcq-f8hm-7rfg","CGA-5r4h-mf2h-m426","CGA-5vff-55q5-h3r7","CGA-5wgc-wrwj-r97m","CGA-5xfv-w8j7-qg89","CGA-64pj-593r-jxfh","CGA-6584-pmfx-8mgh","CGA-69wg-5pp2-gx9c","CGA-6mcq-8fw2-h9w7","CGA-6rc2-6mx8-cvwj","CGA-775q-x668-v58r","CGA-7853-mxhr-39rf","CGA-7f58-mxvg-x463","CGA-7jp4-2vqq-q73f","CGA-7jvm-jvgp-7mv3","CGA-7x6c-q7g7-q7xx","CGA-848r-9g5r-p954","CGA-873v-rf7h-mwgr","CGA-8prw-7rqq-g7x3","CGA-8qg4-2gxx-jgpv","CGA-8w5h-255q-9f47","CGA-92f9-r273-3554","CGA-94xf-ghr4-9pvv","CGA-9752-v8qp-mf6j","CGA-97g7-9g57-7rpr","CGA-9vh9-qcp3-g7p5","CGA-ccrp-h6v9-7w9p","CGA-cjm9-wf5w-4v62","CGA-cpcg-c24p-fq7m","CGA-cpwf-7x7g-4vp4","CGA-cq9j-67gx-4h7q","CGA-f4fc-x3wj-3v74","CGA-f84w-9mwj-qcq9","CGA-ff2f-gh8x-hc49","CGA-fh35-96c9-6q9f","CGA-fjvq-6gq4-5h47","CGA-fv8q-vq85-rx25","CGA-fv9q-jc3r-g657","CGA-fw8p-26p3-47x3","CGA-fwjv-wh4g-g3h8","CGA-fx73-wvp8-5xjj","CGA-g6xp-274f-mxm8","CGA-g8mg-pxh4-cc33","CGA-ggjq-jccp-wfhm","CGA-gmj8-948r-8qjh","CGA-gmxv-cpmr-7x84","CGA-h3wr-5p3q-83qv","CGA-h4px-mjvr-hf7p","CGA-h56q-3c9w-mrpj","CGA-h956-hq5h-98p2","CGA-j452-h685-cffv","CGA-j89x-8p5v-mgwx","CGA-jg4f-2qqw-h6qg","CGA-jp28-75jg-jq5m","CGA-jx87-f9w6-xg5f","CGA-m63p-65gr-pq5f","CGA-m789-mj48-xcrx","CGA-mccr-mp2w-v92j","CGA-mcp9-v8vq-wr9r","CGA-mpv3-2629-g932","CGA-mv2g-h223-m3wj","CGA-p4jv-qwqj-69g7","CGA-pc63-44q8-3h4c","CGA-pgj8-hg22-5j2h","CGA-ppp2-f7h2-6ph7","CGA-q5c7-9xhx-6ggw","CGA-q66f-5gr8-xf4x","CGA-qcpr-26g4-q2g5","CGA-qfqj-5g87-3r29","CGA-qgg3-38p8-48r3","CGA-r3p2-623x-2x26","CGA-r5mq-26vh-pf29","CGA-rc3h-xg9c-c26r","CGA-rh8v-3fv6-x5w2","CGA-rhv5-7hxh-vf89","CGA-rm5m-wx9v-w6cp","CGA-rp4f-c6wh-3j22","CGA-rxgm-cqhc-gp6h","CGA-vwr6-h9hx-wxxv","CGA-w4q9-2686-p7fq","CGA-w5mj-vcw5-58f4","CGA-w7r4-2894-558p","CGA-wc5c-vjw7-jrvw","CGA-wc72-f36p-gvwv","CGA-wf4h-x88p-qw74","CGA-wfh6-v3hx-g45f","CGA-wg84-57f6-fr67","CGA-whjg-6m3w-4qwv","CGA-whv9-26vc-gr3r","CGA-wp6q-r89w-832m","CGA-wpmq-qm38-8xh9","CGA-wq4m-4j7h-7pr5","CGA-x3fc-qjx8-pwq8","CGA-xf6h-f65h-2w9f","CGA-xfmv-58x9-jp9m","CGA-xgx3-gqrr-h7xr","CGA-xrj4-g8vj-w2cj","CGA-xv29-hx52-q57q","GHSA-f3m7-gqxr-g87x"],"status":"published","duplicateOf":null,"title":null,"description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassing element and attribute sanitization/validation through specific namespace workarounds. Specifically, namespaced script elements (e.g., <svg:script> or <:svg:script>) were not properly identified as script elements by the Angular template preparser, allowing them to pass through template compilation without being stripped. Furthermore, security context schema mappings for element attributes did not consistently handle attributes within namespaced elements (like SVG and MathML), opening up gaps where malicious namespaced attributes could bypass runtime and compile-time sanitizers. Combined, these flaws enable an attacker who can inject or supply a template/tag structure with custom namespaces to bypass Angular's script-stripping logic and attribute sanitizers, leading to client-side Cross-Site Scripting (XSS). This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22.","dates":{"published":"2026-06-22T15:11:48.347Z","modified":"2026-06-22T17:54:55.320Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.1,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":7.2,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":7.2,"impact":4.5,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":7.2,"impact":4.5,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00344,"percentile":0.26407,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00344},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00344,"percentile":0.26407}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00344,"percentile":0.26407}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"angular","product":"angular","name":"angular","label":"angular","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 21.0.0-next.0 < 21.2.15","noFixRecorded":true,"fixedIn":null},{"text":"≥ 22.0.0-next.0 < 22.0.0-rc.2","noFixRecorded":true,"fixedIn":null},{"text":"≥ 20.0.0-next.0 < 20.3.22","noFixRecorded":true,"fixedIn":null},{"text":"≥ 19.0.0-next.0 < 19.2.22","noFixRecorded":true,"fixedIn":null},{"text":"≤ 18.2.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.0.0, < 19.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 20.0.0, < 20.3.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 21.0.0, < 21.2.15","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next0","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next1","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next10","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next11","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next12","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next2","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next3","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next4","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next5","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next6","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next7","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next8","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:next9","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:rc0","noFixRecorded":false,"fixedIn":null},{"text":"22.0.0:rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 21.0.0-next.0 < 21.2.15 (No fix recorded) | ≥ 22.0.0-next.0 < 22.0.0-rc.2 (No fix recorded) | ≥ 20.0.0-next.0 < 20.3.22 (No fix recorded) | ≥ 19.0.0-next.0 < 19.2.22 (No fix recorded) | ≤ 18.2.14 | ≥ 19.0.0, < 19.2.22 | ≥ 20.0.0, < 20.3.22 | ≥ 21.0.0, < 21.2.15 | 22.0.0:next0 | 22.0.0:next1 | 22.0.0:next10 | 22.0.0:next11 | 22.0.0:next12 | 22.0.0:next2 | 22.0.0:next3 | 22.0.0:next4 | 22.0.0:next5 | 22.0.0:next6 | 22.0.0:next7 | 22.0.0:next8 | 22.0.0:next9 | 22.0.0:rc0 | 22.0.0:rc1","eol":{"isEol":false,"eolDate":"2028-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"22","label":"22","eolFrom":"2028-06-30T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"22.2.3"},"product":{"name":"angular","label":"Angular","category":"framework"}},"hubHref":"/vendor/angular/angular"},{"vendor":"chainguard","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"debian","product":"angular.js","name":"angular.js","label":"angular.js","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/angular.js","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"angular.js","name":"angular.js","label":"angular.js","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/angular.js","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"@angular","product":"compiler","name":"@angular/compiler","label":"compiler","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@angular/compiler","purlType":"npm","versions":[{"text":"≥ 21.0.0-next.0, < 21.2.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 22.0.0-next.0, < 22.0.0-rc.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 20.0.0-next.0, < 20.3.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.0.0-next.0, < 19.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≤ 18.2.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 21.0.0-next.0, < 21.2.15 | ≥ 22.0.0-next.0, < 22.0.0-rc.2 | ≥ 20.0.0-next.0, < 20.3.22 | ≥ 19.0.0-next.0, < 19.2.22 | ≤ 18.2.14","eol":null,"hubHref":null},{"vendor":"@angular","product":"core","name":"@angular/core","label":"core","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@angular/core","purlType":"npm","versions":[{"text":"≥ 21.0.0-next.0, < 21.2.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 22.0.0-next.0, < 22.0.0-rc.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 20.0.0-next.0, < 20.3.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.0.0-next.0, < 19.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≤ 18.2.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 21.0.0-next.0, < 21.2.15 | ≥ 22.0.0-next.0, < 22.0.0-rc.2 | ≥ 20.0.0-next.0, < 20.3.22 | ≥ 19.0.0-next.0, < 19.2.22 | ≤ 18.2.14","eol":null,"hubHref":null}],"affectedCount":25,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/angular/angular/security/advisories/GHSA-f3m7-gqxr-g87x","label":"github.com/angular/angular/security/advisories/GHSA-f3m7-gqxr-g87x","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB","Third Party Advisory"]},{"url":"https://github.com/angular/angular/pull/68689","label":"github.com/angular/angular/pull/68689","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Issue Tracking","Patch"]},{"url":"https://github.com/angular/angular/pull/68868","label":"github.com/angular/angular/pull/68868","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Issue Tracking"]},{"url":"https://ubuntu.com/security/CVE-2026-50557","label":"ubuntu.com/security/CVE-2026-50557","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50557","label":"www.cve.org/CVERecord?id=CVE-2026-50557","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-50557","label":"security-tracker.debian.org/tracker/CVE-2026-50557","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50557.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50557.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50557","label":"nvd.nist.gov/vuln/detail/CVE-2026-50557","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/angular/angular","label":"github.com/angular/angular","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-CJC5-9CMC-6PGH"]},"timeline":[{"kind":"published","date":"2026-06-22T15:11:48.347Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-22T17:54:55.320Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:36:35.866Z","stale":false,"partial":false}}