CLSA-2026-1775176179 TuxCare security update for @angular (2 CVEs)

🗓️ 04 Aug 2026 14:52:21Reported by GoogleType

osv🔗 osv.dev👁 3 Views

TuxCare fixes two vulnerabilities in Angular by rebuilding seventeen packages; fixed in 17.3.12-tuxcare.3.

Reporter	Title	Published	Views	Family All 103
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Client is vulnerable to cross-site request forgery token leakage due to Angular (CVE-2025-66035)	31 Jul 202617:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities related to Angular and JJWT have been fixed in IBM Informix HQ 3.2.2.	27 Apr 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: common-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by Credential Leak by App Logic that leads to the unauthorized disclosure.	2 Jun 202611:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect for Space Management is vulnerable to cross-site request forgery token leakage due to Angular (CVE-2025-66035)	31 Jul 202617:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery due to Angular [CVE-2025-66412, CVE-2026-22610, CVE-2025-66035]	20 Feb 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by Cross-Site Request Forgery and Cross-Site Scripting in Digital Certificate Manager and Navigator for i [CVE-2025-66035, CVE-2025-66412, CVE-2026-22610]	20 Feb 202616:42	–	ibm
GithubExploit	Exploit for Server-Side Request Forgery in Svelte Sveltekit	17 Dec 202522:50	–	githubexploit
Chainguard	CVE-2025-66035 vulnerabilities	2 Jul 202620:22	–	cgr
Circl	CVE-2025-59052	10 Sep 202523:46	–	circl
Circl	CVE-2025-66035	26 Nov 202523:17	–	circl

07 Aug 2026 10:02Current

5.3Medium risk

Vulners AI Score5.3

CVSS 47.7

EPSS0.00645

SSVC