BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Search results
PRODUCT FAMILYFRAMEWORKVERIFIED

Angular

Angular

Angular is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Lifecycle status

No support or retirement date is shown unless BlackTree can link it to a registered publisher source. A missing date means that a boundary is not publicly stated, has not yet been extracted, or still needs source routing. It does not mean the product is supported indefinitely.

Product overview

Angular is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Main capabilities

  • Application development components
  • Versioned runtime or build interfaces
  • Security and compatibility maintenance

Typical use

Used by software teams to build, run or maintain applications.

Deployment

Included in source projects, application dependencies, build systems or managed runtimes.

Lifecycle records

ReleaseBoundaryDate
20Support ends28 November 2026
21Support endsJune 2027
22Support endsJune 2028

Official sources

VERIFIED

Angular official lifecycle source

Checked automatically.

Extracted 3 lifecycle record(s), including 3 bounded date record(s), from the registered official source.

Open publisher source

Package vulnerability advisories

CVE-2026-27970

Angular i18n vulnerable to Cross-Site Scripting

Fixed: 21.2.0, 21.1.6, 20.3.17, 19.2.19

CVE-2026-54267

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Fixed: 22.0.1, 21.2.17, 20.3.25

CVE-2026-22610

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Fixed: 21.1.0-rc.0, 21.0.7, 20.3.16, 19.2.18

CVE-2026-69151

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Fixed: 22.0.1, 21.2.19, 20.3.27

CVE-2026-88057

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Fixed: 22.1.0, 21.2.20, 20.3.28

CVE-2026-50557

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Fixed: 21.2.15, 22.0.0-rc.2, 20.3.22, 19.2.22

CVE-2026-52725

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

Fixed: 21.2.15, 22.0.0-rc.2, 19.2.23, 20.3.22

CVE-2021-4231

Angular vulnerable to Cross-site Scripting

Fixed: 11.0.5, 11.1.0-next.3, 10.2.5