Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular upgrade package could allow code execution
published 19 days ago
Summary
The @angular/upgrade component used in your web applications has a security weakness that could let an attacker run malicious code on users' browsers. TuxCare has released an updated version (10.2.5‑tuxcare.13) that fixes the problem. Upgrade to the new version as soon as possible to protect your site.
What to do
- Update angular @angular/upgrade to version 10.2.5-tuxcare.13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/upgrade |
>= 10.2.5-tuxcare.0, < 10.2.5-tuxcare.13 Fix: upgrade to 10.2.5-tuxcare.13
|
Original advisory text
TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 10.2.5-tuxcare.13.
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
CLSA-2026-1792208346 · OSV
Track software like this
Free during beta