Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular Elements could allow remote code execution
published 17 days ago
Summary
The Angular Elements package can be tricked into running unwanted code, which could let attackers take control of your application. The issue has been fixed in version 12.2.17-tuxcare.6. Update to this version as soon as possible to protect your system.
What to do
- Update angular @angular/elements to version 12.2.17-tuxcare.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/elements |
>= 12.2.17-tuxcare.0, < 12.2.17-tuxcare.6 Fix: upgrade to 12.2.17-tuxcare.6
|
Original advisory text
TuxCare security update for @angular/elements (1 CVE)
TuxCare rebuilt @angular/elements to address 1 CVE. Fixed in 12.2.17-tuxcare.6.
Timeline
Published18 Oct 2026
Updated19 Oct 2026
First seen19 Oct 2026
Sources
CLSA-2026-1792357252 · OSV
Track software like this
Free during beta