Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular Elements may let attackers execute code
published 17 days ago
Summary
The Angular Elements package can be tricked into running malicious code, which could let an attacker take control of your web application. The issue has been fixed in the updated version 15.0.3‑tuxcare.4. Upgrade to this version as soon as possible to protect your site.
What to do
- Update angular @angular/elements to version 15.0.3-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/elements |
>= 15.0.3-tuxcare.0, < 15.0.3-tuxcare.4 Fix: upgrade to 15.0.3-tuxcare.4
|
Original advisory text
TuxCare security update for @angular/elements (1 CVE)
TuxCare rebuilt @angular/elements to address 1 CVE. Fixed in 15.0.3-tuxcare.4.
Timeline
Published18 Oct 2026
Updated2 Nov 2026
First seen19 Oct 2026
Sources
CLSA-2026-1792357332 · OSV
Track software like this
Free during beta