Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages could be exploited to run malicious code
published 3 months ago
Summary
Several Angular packages, including bazel, benchpress, common, compiler, and compiler‑cli, were found to contain a security weakness that could let an attacker run unwanted code. The issue has been fixed in the updated version 13.4.0‑tuxcare.8. Apply this update as soon as possible to protect your applications.
What to do
- Update angular @angular/bazel to version 13.4.0-tuxcare.8.
- Update angular @angular/benchpress to version 13.4.0-tuxcare.8.
- Update angular @angular/common to version 13.4.0-tuxcare.8.
- Update angular @angular/compiler to version 13.4.0-tuxcare.8.
- Update angular @angular/compiler-cli to version 13.4.0-tuxcare.8.
- Update angular @angular/core to version 13.4.0-tuxcare.8.
- Update angular @angular/elements to version 13.4.0-tuxcare.8.
- Update angular @angular/forms to version 13.4.0-tuxcare.8.
- Update angular @angular/language-service to version 13.4.0-tuxcare.8.
- Update angular @angular/localize to version 13.4.0-tuxcare.8.
- Update angular @angular/platform-browser to version 13.4.0-tuxcare.8.
- Update angular @angular/platform-browser-dynamic to version 13.4.0-tuxcare.8.
- Update angular @angular/platform-server to version 13.4.0-tuxcare.8.
- Update angular @angular/router to version 13.4.0-tuxcare.8.
- Update angular @angular/service-worker to version 13.4.0-tuxcare.8.
- Update angular @angular/upgrade to version 13.4.0-tuxcare.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/bazel |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/benchpress |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/common |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/compiler |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/core |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/elements |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/forms |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/language-service |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/localize |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/platform-browser |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/platform-server |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/router |
< 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/service-worker |
< 13.4.0-tuxcare.8 >= 13.4.0-tuxcare.0, < 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
| TuxCare:npm | angular | @angular/upgrade |
< 13.4.0-tuxcare.8 Fix: upgrade to 13.4.0-tuxcare.8
|
Original advisory text
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 13.4.0-tuxcare.8.
Timeline
Published4 Aug 2026
Updated19 Oct 2026
First seen13 Oct 2026
Sources
CLSA-2026-1783213287 · OSV
Track software like this
Free during beta