Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
@angular/localize may allow attackers to bypass protections
published 17 days ago
Summary
The @angular/localize library used in your web applications has a security weakness that could let a malicious user evade safety checks. Update to version 13.3.12‑tuxcare.1 to close the gap. Applying the update will protect your site from this risk.
What to do
- Update angular @angular/localize to version 13.3.12-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/localize |
>= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.1 Fix: upgrade to 13.3.12-tuxcare.1
|
Original advisory text
TuxCare security update for @angular/localize (1 CVE)
TuxCare rebuilt @angular/localize to address 1 CVE. Fixed in 13.3.12-tuxcare.1.
Timeline
Published19 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792371598 · OSV
Track software like this
Free during beta