Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
@angular/upgrade could allow malicious code execution
published 19 days ago
Summary
The @angular/upgrade package contained a security weakness that might let an attacker run unwanted code in your application. This could affect the integrity of your web site or data. Updating to version 8.2.14-tuxcare.6 resolves the issue, so apply the update as soon as possible.
What to do
- Update angular @angular/upgrade to version 8.2.14-tuxcare.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/upgrade |
>= 8.2.14-tuxcare.0, < 8.2.14-tuxcare.6 Fix: upgrade to 8.2.14-tuxcare.6
|
Original advisory text
TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 8.2.14-tuxcare.6.
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
CLSA-2026-1792208089 · OSV
Track software like this
Free during beta