Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Angular core component can be tricked into running code

published 17 days ago
Summary

The core library used by Angular applications has a weakness that could let an attacker make the software execute unwanted commands. This could lead to data theft or other harmful actions. Update the Angular core package to the TuxCare‑provided version 8.0.3‑tuxcare.9 as soon as possible to close the gap.

What to do
  • Update angular @angular/core to version 8.0.3-tuxcare.9.
Affected software
Ecosystem VendorProductAffected versions
TuxCare:npm angular @angular/core >= 8.0.3-tuxcare.0, < 8.0.3-tuxcare.9
Fix: upgrade to 8.0.3-tuxcare.9
Original advisory text
TuxCare security update for @angular/core (1 CVE)
TuxCare rebuilt @angular/core to address 1 CVE. Fixed in 8.0.3-tuxcare.9.
Timeline
Published18 Oct 2026
Updated18 Oct 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792345497 · OSV
Track software like this
Free during beta