Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular compiler-cli can allow malicious code execution
published 17 days ago
Summary
The Angular compiler-cli package may let attackers run unwanted code on your system. Updating to the new version 14.2.8-tuxcare.4 fixes this risk. Apply the update as soon as possible to keep your applications safe.
What to do
- Update angular @angular/compiler-cli to version 14.2.8-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/compiler-cli |
>= 14.2.8-tuxcare.0, < 14.2.8-tuxcare.4 Fix: upgrade to 14.2.8-tuxcare.4
|
Original advisory text
TuxCare security update for @angular/compiler-cli (1 CVE)
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 14.2.8-tuxcare.4.
Timeline
Published18 Oct 2026
Updated2 Nov 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792325400 · OSV
Track software like this
Free during beta