CLSA-2026-1786751431 TuxCare security update for @angular (3 CVEs)

🗓️ 14 Aug 2026 23:50:31Reported by GoogleType

osv🔗 osv.dev👁 6 Views

TuxCare patched 3 CVEs in 17 rebuilt @angular packages, fixed in 17.3.12-tuxcare.14.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	9 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust translation file to replace a static handler with executable JavaScript	9 Sep 202620:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and common-joins (CVE-2026-69151, CVE-2026-68945)	7 Sep 202607:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.	10 Sep 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response	9 Sep 202620:52	–	ibm
attackerkb	CVE-2026-68945	3 Aug 202615:58	–	attackerkb
attackerkb	CVE-2026-69149	3 Aug 202616:14	–	attackerkb
attackerkb	CVE-2026-69151	3 Aug 202616:23	–	attackerkb
Chainguard	CVE-2026-68945 vulnerabilities	16 Sep 202602:54	–	cgr
Chainguard	CVE-2026-69151 vulnerabilities	16 Sep 202602:54	–	cgr

15 Aug 2026 12:30Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.16.1

CVSS 48.8

EPSS0.00349

SSVC

angular tuxcare security-update cve package-rebuild