Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages could let attackers exploit several security bugs
published 3 months ago
Summary
The Angular libraries bazel, benchpress, common, compiler, and compiler-cli have multiple known security weaknesses. Attackers could use these flaws to compromise your applications or data. Update to version 16.2.11-tuxcare.1, which contains the fixes, as soon as possible.
What to do
- Update angular @angular/bazel to version 16.2.11-tuxcare.1.
- Update angular @angular/benchpress to version 16.2.11-tuxcare.1.
- Update angular @angular/common to version 16.2.11-tuxcare.1.
- Update angular @angular/compiler to version 16.2.11-tuxcare.1.
- Update angular @angular/compiler-cli to version 16.2.11-tuxcare.1.
- Update angular @angular/core to version 16.2.11-tuxcare.1.
- Update angular @angular/elements to version 16.2.11-tuxcare.1.
- Update angular @angular/forms to version 16.2.11-tuxcare.1.
- Update angular @angular/language-service to version 16.2.11-tuxcare.1.
- Update angular @angular/localize to version 16.2.11-tuxcare.1.
- Update angular @angular/platform-browser to version 16.2.11-tuxcare.1.
- Update angular @angular/platform-browser-dynamic to version 16.2.11-tuxcare.1.
- Update angular @angular/platform-server to version 16.2.11-tuxcare.1.
- Update angular @angular/router to version 16.2.11-tuxcare.1.
- Update angular @angular/service-worker to version 16.2.11-tuxcare.1.
- Update angular @angular/upgrade to version 16.2.11-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/bazel |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/benchpress |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/common |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/compiler |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/core |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/elements |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/forms |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/language-service |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/localize |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/platform-browser |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/platform-server |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/router |
< 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/service-worker |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
| TuxCare:npm | angular | @angular/upgrade |
< 16.2.11-tuxcare.1 >= 16.2.11-tuxcare.0, < 16.2.11-tuxcare.1 Fix: upgrade to 16.2.11-tuxcare.1
|
Original advisory text
TuxCare security update for @angular (20 CVEs)
TuxCare rebuilt 3 @angular packages to address 20 CVEs. Fixed in 16.2.11-tuxcare.1.
Timeline
Published4 Aug 2026
Updated19 Oct 2026
First seen13 Oct 2026
Sources
CLSA-2026-1783040463 · OSV
Track software like this
Free during beta