Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular compiler may run malicious code
published 17 days ago
Summary
The Angular compiler package (compiler-cli) can be tricked into executing code an attacker provides, potentially compromising your web application. TuxCare has released a patched version, 12.2.17-tuxcare.3, that removes this risk. Update the Angular compiler to that version or newer to protect your system.
What to do
- Update angular @angular/compiler-cli to version 12.2.17-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/compiler-cli |
>= 12.2.17-tuxcare.0, < 12.2.17-tuxcare.3 Fix: upgrade to 12.2.17-tuxcare.3
|
Original advisory text
TuxCare security update for @angular/compiler-cli (1 CVE)
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 12.2.17-tuxcare.3.
Timeline
Published18 Oct 2026
Updated18 Oct 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792325930 · OSV
Track software like this
Free during beta