Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages could let attackers execute code
published 2 months ago
Summary
Several Angular libraries, including animations, bazel, benchpress, common, and compiler, have been updated to stop attackers from running unwanted code on your site. The issue is fixed in version 16.2.12‑tuxcare.12. Update to that version as soon as possible to keep your applications safe.
What to do
- Update angular @angular/animations to version 16.2.12-tuxcare.12.
- Update angular @angular/bazel to version 16.2.12-tuxcare.12.
- Update angular @angular/benchpress to version 16.2.12-tuxcare.12.
- Update angular @angular/common to version 16.2.12-tuxcare.12.
- Update angular @angular/compiler to version 16.2.12-tuxcare.12.
- Update angular @angular/compiler-cli to version 16.2.12-tuxcare.12.
- Update angular @angular/core to version 16.2.12-tuxcare.12.
- Update angular @angular/elements to version 16.2.12-tuxcare.12.
- Update angular @angular/forms to version 16.2.12-tuxcare.12.
- Update angular @angular/language-service to version 16.2.12-tuxcare.12.
- Update angular @angular/localize to version 16.2.12-tuxcare.12.
- Update angular @angular/platform-browser to version 16.2.12-tuxcare.12.
- Update angular @angular/platform-browser-dynamic to version 16.2.12-tuxcare.12.
- Update angular @angular/platform-server to version 16.2.12-tuxcare.12.
- Update angular @angular/router to version 16.2.12-tuxcare.12.
- Update angular @angular/service-worker to version 16.2.12-tuxcare.12.
- Update angular @angular/upgrade to version 16.2.12-tuxcare.12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/animations |
< 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/bazel |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/benchpress |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/common |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/compiler |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/core |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/elements |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/forms |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/language-service |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/localize |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/platform-browser |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/platform-server |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/router |
< 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/service-worker |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
| TuxCare:npm | angular | @angular/upgrade |
< 16.2.12-tuxcare.12 >= 16.2.12-tuxcare.0, < 16.2.12-tuxcare.12 Fix: upgrade to 16.2.12-tuxcare.12
|
Original advisory text
TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 3 @angular packages to address 3 CVEs. Fixed in 16.2.12-tuxcare.12.
Timeline
Published14 Aug 2026
Updated19 Oct 2026
First seen15 Aug 2026
Sources
CLSA-2026-1786750611 · OSV
Track software like this
Free during beta