Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages could let attackers run code
published 3 months ago
Summary
Several Angular libraries, including common and compiler, were found to let a malicious user execute code on your system. Updating to the patched version (17.3.12‑tuxcare.12) removes this risk. Apply the update as soon as possible to keep your applications safe.
What to do
- Update angular @angular/bazel to version 17.3.12-tuxcare.12.
- Update angular @angular/benchpress to version 17.3.12-tuxcare.12.
- Update angular @angular/common to version 17.3.12-tuxcare.12.
- Update angular @angular/compiler to version 17.3.12-tuxcare.12.
- Update angular @angular/compiler-cli to version 17.3.12-tuxcare.12.
- Update angular @angular/core to version 17.3.12-tuxcare.12.
- Update angular @angular/elements to version 17.3.12-tuxcare.12.
- Update angular @angular/forms to version 17.3.12-tuxcare.12.
- Update angular @angular/language-service to version 17.3.12-tuxcare.12.
- Update angular @angular/localize to version 17.3.12-tuxcare.12.
- Update angular @angular/platform-browser to version 17.3.12-tuxcare.12.
- Update angular @angular/platform-browser-dynamic to version 17.3.12-tuxcare.12.
- Update angular @angular/platform-server to version 17.3.12-tuxcare.12.
- Update angular @angular/router to version 17.3.12-tuxcare.12.
- Update angular @angular/service-worker to version 17.3.12-tuxcare.12.
- Update angular @angular/upgrade to version 17.3.12-tuxcare.12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/bazel |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/benchpress |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/common |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/compiler |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/core |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/elements |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/forms |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/language-service |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/localize |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/platform-browser |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/platform-server |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/router |
< 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/service-worker |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/upgrade |
< 17.3.12-tuxcare.12 >= 17.3.12-tuxcare.0, < 17.3.12-tuxcare.12 Fix: upgrade to 17.3.12-tuxcare.12
|
Original advisory text
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 17.3.12-tuxcare.12.
Timeline
Published4 Aug 2026
Updated19 Oct 2026
First seen13 Oct 2026
Sources
CLSA-2026-1781139200 · OSV
Track software like this
Free during beta