PT-2026-126869

TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 16.2.11-tuxcare.4...

PT-2026-126938

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 5.1.2-tuxcare.1...

PT-2026-126868

TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 16.2.7-tuxcare.5...

PT-2026-127084

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 15.2.10-tuxcare.12...

PT-2026-126973

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 8.0.0-tuxcare.4...

PT-2026-126983

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 5.2.11-tuxcare.9...

PT-2026-126945

TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 5.2.7-tuxcare.4...

PT-2026-126986

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 13.4.0-tuxcare.9...

PT-2026-126958

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 10.2.5-tuxcare.3...

PT-2026-126871

TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 16.2.12-tuxcare.14...

PT-2026-126807

TuxCare rebuilt @angular/compiler to address 13 CVEs. Fixed in 11.2.0-tuxcare.3...

PT-2026-127015

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 13.3.11-tuxcare.3...

Security Bulletin: Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1

Summary Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54265 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17,...

SUSE CVE-2026-88057

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +23 more potentially affected by CVE-2026-88057 via @angular/compiler (>=21.0.0, <=21.2.19)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =1.0.0, =4.4.0-beta.2, =0.19.0, =14.0.0, =1.0.0-next.27766, =1.0.77-rc.1, =1.0.87 and more Source cves: CVE-2026-88057 Source advisory:...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.28), @angelmartz/template-drawer-navigation-ng (9.1.0) +18 more potentially affected by CVE-2026-88057 via @angular/compiler (>=22.0.0, <=22.0.8)

@angular/compiler NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =23.0.0-alpha.2, =23.0.0-alpha.2, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-88057 Source advisory: SNYK:JS-ANGULARCOMPILER-19778381...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +301 more potentially affected by CVE-2026-88057 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-88057 Source advisory: OSV:GHSA-HH8M-FM6V-7CVG...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +301 more potentially affected by CVE-2026-88057 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-88057 Source advisory: GHSA-HH8M-FM6V-7CVG...