Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-66412 · Microsoft / collected KEV context

EUVD-2025-200118

GHSA-v4hv-rgfq-gp49

cve-program · CVE-2025-66412

• https://github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49
• https://github.com/angular/angular/commit/1c6b0704fb63d051fab8acff84d076abfbc4893a

euvd · EUVD-2025-200118

• https://github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49
• https://github.com/angular/angular/commit/1c6b0704fb63d051fab8acff84d076abfbc4893a

nvd · CVE-2025-66412

• https://github.com/angular/angular/commit/1c6b0704fb63d051fab8acff84d076abfbc4893a
• https://github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html
• https://cert-portal.siemens.com/productcert/html/ssa-485750.html

osv · GHSA-v4hv-rgfq-gp49

• https://github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49
• https://nvd.nist.gov/vuln/detail/CVE-2025-66412
• https://github.com/angular/angular/commit/1c6b0704fb63d051fab8acff84d076abfbc4893a
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html
• https://cert-portal.siemens.com/productcert/html/ssa-485750.html
• https://github.com/angular/angular

No related operational record is retained in the current change model.