Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Angular packages could let attackers run malicious code

published 1 month ago
Summary

Several Angular components, including animations, bazel, benchpress, common, and compiler, had flaws that could be exploited to execute unwanted code. The issue has been corrected in the updated package version 15.2.2-tuxcare.5. Apply the latest update to keep your applications safe.

What to do
  • Update angular @angular/animations to version 15.2.2-tuxcare.5.
  • Update angular @angular/bazel to version 15.2.2-tuxcare.5.
  • Update angular @angular/benchpress to version 15.2.2-tuxcare.5.
  • Update angular @angular/common to version 15.2.2-tuxcare.5.
  • Update angular @angular/compiler to version 15.2.2-tuxcare.5.
  • Update angular @angular/compiler-cli to version 15.2.2-tuxcare.5.
  • Update angular @angular/core to version 15.2.2-tuxcare.5.
  • Update angular @angular/elements to version 15.2.2-tuxcare.5.
  • Update angular @angular/forms to version 15.2.2-tuxcare.5.
  • Update angular @angular/language-service to version 15.2.2-tuxcare.5.
  • Update angular @angular/localize to version 15.2.2-tuxcare.5.
  • Update angular @angular/platform-browser to version 15.2.2-tuxcare.5.
  • Update angular @angular/platform-browser-dynamic to version 15.2.2-tuxcare.5.
  • Update angular @angular/platform-server to version 15.2.2-tuxcare.5.
  • Update angular @angular/router to version 15.2.2-tuxcare.5.
  • Update angular @angular/service-worker to version 15.2.2-tuxcare.5.
  • Update angular @angular/upgrade to version 15.2.2-tuxcare.5.
Affected software
Ecosystem VendorProductAffected versions
TuxCare:npm angular @angular/animations < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/bazel < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/benchpress < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/common < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/compiler < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/compiler-cli < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/core < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/elements < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/forms < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/language-service < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/localize < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/platform-browser < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/platform-browser-dynamic < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/platform-server < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/router < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/service-worker < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
TuxCare:npm angular @angular/upgrade < 15.2.2-tuxcare.5
>= 15.2.2-tuxcare.0, < 15.2.2-tuxcare.5
Fix: upgrade to 15.2.2-tuxcare.5
Original advisory text
TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.2.2-tuxcare.5.
Timeline
Published27 Sep 2026
Updated2 Nov 2026
First seen30 Sep 2026
Sources
CLSA-2026-1790471349 · OSV
Track software like this
Free during beta