Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Angular compiler-cli may let attackers run code

published 17 days ago
Summary

The Angular compiler-cli package can be tricked into executing malicious code, which could let an attacker take control of your application. TuxCare has released a new version (14.2.12‑tuxcare.3) that removes this risk. Update the @angular/compiler-cli package to the new version as soon as possible.

What to do
  • Update angular @angular/compiler-cli to version 14.2.12-tuxcare.3.
Affected software
Ecosystem VendorProductAffected versions
TuxCare:npm angular @angular/compiler-cli >= 14.2.12-tuxcare.0, < 14.2.12-tuxcare.3
Fix: upgrade to 14.2.12-tuxcare.3
Original advisory text
TuxCare security update for @angular/compiler-cli (1 CVE)
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 14.2.12-tuxcare.3.
Timeline
Published18 Oct 2026
Updated2 Nov 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792325401 · OSV
Track software like this
Free during beta