PT-2026-126765

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 6.1.10-tuxcare.3...

PT-2026-127056

TuxCare rebuilt @angular/compiler to address 14 CVEs. Fixed in 17.3.12-tuxcare.13...

PT-2026-126778

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 12.2.16-tuxcare.1...

PT-2026-126810

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 6.1.10-tuxcare.10...

PT-2026-126962

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 13.4.0-tuxcare.2...

PT-2026-126878

TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 7.2.11-tuxcare.5...

PT-2026-126947

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 7.2.16-tuxcare.11...

PT-2026-127007

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 11.2.0-tuxcare.1...

PT-2026-127061

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 17.1.0-tuxcare.3...

PT-2026-127003

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 15.2.10-tuxcare.4...

PT-2026-127048

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 15.2.9-tuxcare.3...

PT-2026-127028

TuxCare rebuilt @angular/compiler to address 17 CVEs. Fixed in 18.1.2-tuxcare.2...

PT-2026-126968

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 11.2.0-tuxcare.2...

PT-2026-126916

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 15.2.1-tuxcare.6...

PT-2026-127002

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 14.3.0-tuxcare.4...

PT-2026-126772

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 13.4.0-tuxcare.4...

Security Bulletin: Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1

Summary Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54265 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17,...

SUSE CVE-2026-88057

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

GHSA-HH8M-FM6V-7CVG Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...