Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular core could let attackers bypass security controls
published 17 days ago
Summary
The core library of Angular applications has been updated because ten security weaknesses were found that could let malicious users run code or gain unauthorized access. Upgrading to the latest patched version (11.2.14-tuxcare.7) resolves these issues. Apply the update as soon as possible to keep your web applications safe.
What to do
- Update angular @angular/core to version 11.2.14-tuxcare.7.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/core |
>= 11.2.14-tuxcare.0, < 11.2.14-tuxcare.7 Fix: upgrade to 11.2.14-tuxcare.7
|
Original advisory text
TuxCare security update for @angular/core (10 CVEs)
TuxCare rebuilt @angular/core to address 10 CVEs. Fixed in 11.2.14-tuxcare.7.
Timeline
Published18 Oct 2026
Updated18 Oct 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792345212 · OSV
Track software like this
Free during beta