Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular service worker could let attackers run malicious code
published 17 days ago
Summary
The @angular/service-worker component in your Angular application has a security weakness that could let an attacker execute unwanted code. This could affect the behavior of your web app and expose user data. Update the package to version 10.2.5‑tuxcare.3 as soon as possible to close the gap.
What to do
- Update angular @angular/service-worker to version 10.2.5-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/service-worker |
>= 10.2.5-tuxcare.0, < 10.2.5-tuxcare.3 Fix: upgrade to 10.2.5-tuxcare.3
|
Original advisory text
TuxCare security update for @angular/service-worker (1 CVE)
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 10.2.5-tuxcare.3.
Timeline
Published19 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792386434 · OSV
Track software like this
Free during beta