Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular compiler could run malicious code
published 18 days ago
Summary
The Angular compiler component used in your web applications may allow specially crafted input to execute unwanted code. This could let attackers alter the behavior of your site or steal data. Update the package to version 5.2.7-tuxcare.2 or later to close the risk.
What to do
- Update angular @angular/compiler to version 5.2.7-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/compiler |
>= 5.2.7-tuxcare.0, < 5.2.7-tuxcare.2 Fix: upgrade to 5.2.7-tuxcare.2
|
Original advisory text
TuxCare security update for @angular/compiler (1 CVE)
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 5.2.7-tuxcare.2.
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
CLSA-2026-1792250552 · OSV
Track software like this
Free during beta