Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages may let attackers run malicious code
published 3 months ago
Summary
TuxCare has released new versions of several Angular packages to fix fifteen security weaknesses that could allow an attacker to execute unwanted code. The affected packages include bazel, benchpress, common, compiler and compiler‑cli. Install the updated version (18.2.12‑tuxcare.2) as soon as possible to stay protected.
What to do
- Update angular @angular/bazel to version 18.2.12-tuxcare.2.
- Update angular @angular/benchpress to version 18.2.12-tuxcare.2.
- Update angular @angular/common to version 18.2.12-tuxcare.2.
- Update angular @angular/compiler to version 18.2.12-tuxcare.2.
- Update angular @angular/compiler-cli to version 18.2.12-tuxcare.2.
- Update angular @angular/core to version 18.2.12-tuxcare.2.
- Update angular @angular/elements to version 18.2.12-tuxcare.2.
- Update angular @angular/forms to version 18.2.12-tuxcare.2.
- Update angular @angular/language-service to version 18.2.12-tuxcare.2.
- Update angular @angular/localize to version 18.2.12-tuxcare.2.
- Update angular @angular/platform-browser to version 18.2.12-tuxcare.2.
- Update angular @angular/platform-browser-dynamic to version 18.2.12-tuxcare.2.
- Update angular @angular/platform-server to version 18.2.12-tuxcare.2.
- Update angular @angular/router to version 18.2.12-tuxcare.2.
- Update angular @angular/service-worker to version 18.2.12-tuxcare.2.
- Update angular @angular/upgrade to version 18.2.12-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/bazel |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/benchpress |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/common |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/compiler |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/core |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/elements |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/forms |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/language-service |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/localize |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/platform-browser |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/platform-server |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/router |
< 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/service-worker |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
| TuxCare:npm | angular | @angular/upgrade |
< 18.2.12-tuxcare.2 >= 18.2.12-tuxcare.0, < 18.2.12-tuxcare.2 Fix: upgrade to 18.2.12-tuxcare.2
|
Original advisory text
TuxCare security update for @angular (15 CVEs)
TuxCare rebuilt 3 @angular packages to address 15 CVEs. Fixed in 18.2.12-tuxcare.2.
Timeline
Published4 Aug 2026
Updated23 Oct 2026
First seen13 Oct 2026
Sources
CLSA-2026-1782954038 · OSV
Track software like this
Free during beta