Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular localize package may allow code injection
published 17 days ago
Summary
The @angular/localize library used in your web applications has a security weakness that could let an attacker run unwanted code. The issue has been fixed in the updated version 13.3.0-tuxcare.6. Upgrade to that version as soon as possible to protect your site.
What to do
- Update angular @angular/localize to version 13.3.0-tuxcare.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/localize |
>= 13.3.0-tuxcare.0, < 13.3.0-tuxcare.6 Fix: upgrade to 13.3.0-tuxcare.6
|
Original advisory text
TuxCare security update for @angular/localize (2 CVEs)
TuxCare rebuilt @angular/localize to address 2 CVEs. Fixed in 13.3.0-tuxcare.6.
Timeline
Published19 Oct 2026
Updated2 Nov 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792371755 · OSV
Track software like this
Free during beta