Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Angular packages could let attackers run code
published 3 months ago
Summary
Five Angular components (benchpress, common, compiler, compiler‑cli, core) were rebuilt to fix a security weakness that could let an attacker execute code. The fix is included in version 4.3.5‑tuxcare.4. Apply this update as soon as possible to keep your applications safe.
What to do
- Update angular @angular/benchpress to version 4.3.5-tuxcare.4.
- Update angular @angular/common to version 4.3.5-tuxcare.4.
- Update angular @angular/compiler to version 4.3.5-tuxcare.4.
- Update angular @angular/compiler-cli to version 4.3.5-tuxcare.4.
- Update angular @angular/core to version 4.3.5-tuxcare.4.
- Update angular @angular/forms to version 4.3.5-tuxcare.4.
- Update angular @angular/http to version 4.3.5-tuxcare.4.
- Update angular @angular/language-service to version 4.3.5-tuxcare.4.
- Update angular @angular/platform-browser to version 4.3.5-tuxcare.4.
- Update angular @angular/platform-browser-dynamic to version 4.3.5-tuxcare.4.
- Update angular @angular/platform-server to version 4.3.5-tuxcare.4.
- Update angular @angular/platform-webworker to version 4.3.5-tuxcare.4.
- Update angular @angular/platform-webworker-dynamic to version 4.3.5-tuxcare.4.
- Update angular @angular/router to version 4.3.5-tuxcare.4.
- Update angular @angular/upgrade to version 4.3.5-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/benchpress |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/common |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/compiler |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/core |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/forms |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/http |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/language-service |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/platform-browser |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/platform-server |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/platform-webworker |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/platform-webworker-dynamic |
< 4.3.5-tuxcare.4 >= 4.3.5-tuxcare.0, < 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/router |
< 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
| TuxCare:npm | angular | @angular/upgrade |
< 4.3.5-tuxcare.4 Fix: upgrade to 4.3.5-tuxcare.4
|
Original advisory text
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 5 @angular packages to address 1 CVE. Fixed in 4.3.5-tuxcare.4.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen13 Oct 2026
Sources
CLSA-2026-1783213294 · OSV
Track software like this
Free during beta