Angular V21, CVE-2026-22610 enables XSS in Angular due to improper sanitization of SVG script sources.