Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular localize package allows code execution
published 17 days ago
Summary
The @angular/localize library used in your web applications can be tricked into running malicious code. This could let an attacker affect the behavior of your site or steal data. Update to the latest TuxCare‑provided version (12.2.17‑tuxcare.3) to close the risk.
What to do
- Update angular @angular/localize to version 12.2.17-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/localize |
>= 12.2.17-tuxcare.0, < 12.2.17-tuxcare.3 Fix: upgrade to 12.2.17-tuxcare.3
|
Original advisory text
TuxCare security update for @angular/localize (1 CVE)
TuxCare rebuilt @angular/localize to address 1 CVE. Fixed in 12.2.17-tuxcare.3.
Timeline
Published19 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792372000 · OSV
Track software like this
Free during beta