CLSA-2026-1786750611 TuxCare security update for @angular (3 CVEs)

🗓️ 14 Aug 2026 23:36:51Reported by GoogleType

osv🔗 osv.dev👁 8 Views

TuxCare rebuilt 17 @angular packages fixing 3 CVEs in version 16.2.12-tuxcare.12.

Reporter	Title	Published	Views	Family All 143
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	9 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust translation file to replace a static handler with executable JavaScript	9 Sep 202620:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and common-joins (CVE-2026-69151, CVE-2026-68945)	7 Sep 202607:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1	4 Oct 202617:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities reported in platform-server-19.2.22.tgz are addressed in APIM11.1	4 Oct 202617:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.	10 Sep 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response	9 Sep 202620:52	–	ibm
attackerkb	CVE-2026-68945	3 Aug 202615:58	–	attackerkb
attackerkb	CVE-2026-69149	3 Aug 202616:14	–	attackerkb
attackerkb	CVE-2026-69151	3 Aug 202616:23	–	attackerkb

15 Aug 2026 12:30Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.1

CVSS 48.8

EPSS0.00418

SSVC

Angular CVE Security Update TuxCare XSS