Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular compiler can be tricked to run unsafe code
published 17 days ago
Summary
The Angular compiler package can be manipulated to execute code that could compromise your application. This risk affects projects that use the @angular/compiler-cli component. Update the package to the latest TuxCare version (18.1.2‑tuxcare.6) to remove the problem.
What to do
- Update angular @angular/compiler-cli to version 18.1.2-tuxcare.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/compiler-cli |
>= 18.1.2-tuxcare.0, < 18.1.2-tuxcare.6 Fix: upgrade to 18.1.2-tuxcare.6
|
Original advisory text
TuxCare security update for @angular/compiler-cli (3 CVEs)
TuxCare rebuilt @angular/compiler-cli to address 3 CVEs. Fixed in 18.1.2-tuxcare.6.
Timeline
Published18 Oct 2026
Updated2 Nov 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792325606 · OSV
Track software like this
Free during beta