Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages could let attackers run malicious code
published 1 month ago
Summary
Several Angular components, including animations, bazel, benchpress, common and compiler, were found to contain a security weakness that could allow an attacker to execute unwanted code. This could compromise the safety of your web applications. Updating to version 15.2.1-tuxcare.6 resolves the issue, so apply the update as soon as possible.
What to do
- Update angular @angular/animations to version 15.2.1-tuxcare.6.
- Update angular @angular/bazel to version 15.2.1-tuxcare.6.
- Update angular @angular/benchpress to version 15.2.1-tuxcare.6.
- Update angular @angular/common to version 15.2.1-tuxcare.6.
- Update angular @angular/compiler to version 15.2.1-tuxcare.6.
- Update angular @angular/compiler-cli to version 15.2.1-tuxcare.6.
- Update angular @angular/core to version 15.2.1-tuxcare.6.
- Update angular @angular/elements to version 15.2.1-tuxcare.6.
- Update angular @angular/forms to version 15.2.1-tuxcare.6.
- Update angular @angular/language-service to version 15.2.1-tuxcare.6.
- Update angular @angular/localize to version 15.2.1-tuxcare.6.
- Update angular @angular/platform-browser to version 15.2.1-tuxcare.6.
- Update angular @angular/platform-browser-dynamic to version 15.2.1-tuxcare.6.
- Update angular @angular/platform-server to version 15.2.1-tuxcare.6.
- Update angular @angular/router to version 15.2.1-tuxcare.6.
- Update angular @angular/service-worker to version 15.2.1-tuxcare.6.
- Update angular @angular/upgrade to version 15.2.1-tuxcare.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/animations |
< 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/bazel |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/benchpress |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/common |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/compiler |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/core |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/elements |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/forms |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/language-service |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/localize |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/platform-browser |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/platform-server |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/router |
< 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/service-worker |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
| TuxCare:npm | angular | @angular/upgrade |
< 15.2.1-tuxcare.6 >= 15.2.1-tuxcare.0, < 15.2.1-tuxcare.6 Fix: upgrade to 15.2.1-tuxcare.6
|
Original advisory text
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 15.2.1-tuxcare.6.
Timeline
Published3 Oct 2026
Updated19 Oct 2026
First seen4 Oct 2026
Sources
CLSA-2026-1791058120 · OSV
Track software like this
Free during beta