CLSA-2026-1792208094 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 16.2.7-tuxcare.1...

CLSA-2026-1792208095 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.6-tuxcare.1...

CLSA-2026-1792208086 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.10-tuxcare.2...

CLSA-2026-1792208080 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 18.2.14-tuxcare.1...

CLSA-2026-1792208076 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 14.3.0-tuxcare.1...

Use of Cache Containing Sensitive Information

Overview Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via the HttpTransferCache utility. An attacker can access sensitive user-specific information by making requests to pages that have been cached by a shared caching layer after another user h...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery due to Angular [CVE-2025-66412, CVE-2026-22610, CVE-2025-66035]

Summary The IBM Db2 Mirror for i GUI uses the Angular web framework. The version of Angular used by IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery as described in the vulnerability details section. IBM has addressed the vulnerabilities for IBM Db2 Mirror...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the HttpClient which has a built-in XSRF protection mechanism. An attacker can obtain sensitive authentication tokens by crafting requests using protocol-relative URLs that cause the...

@deja-js/component (>=1.6.3, <=1.9.1), @omnia/foundation (>=0.1.0, <=1.31.1-20033) +46 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=4.0.0, <=4.4.6)

@angular/upgrade NPM version =4.0.0, =1.6.3, =0.1.0, =0.0.1-beta-2, =0.1.0, =1.0.0, =1.0.0, =2.1.1, =1.0.0, =1.1.2, =1.1.1, =1.4.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

angular-io-bretwang (1.0.0), angular-io-bretwang02 (1.0.0) +13 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=5.0.5, <=5.2.9)

@angular/upgrade NPM version =5.0.5, =1.0.0, =1.0.0, =1.0.0, =1.0.6, =1.0.48, =5.0.6, =1.0.0, =1.0.3 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@c8y/apps (>=9.16.1-rc.0, <=9.24.2-rc.0), @mediafly/js-ui (>=26.3.13, <=28.4.3) +3 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=6.0.3, <=6.1.9)

@angular/upgrade NPM version =6.0.3, =9.16.1-rc.0, =26.3.13, =2.0.0, =0.3.19, =0.5.6 - path-framework-urechmat 0.5.4 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@c8y/apps (>=1005.9.0, <=1010.0.41), @ux-aspects/ux-aspects-docs (>=1.8.2, <=2.0.0-rc.1) +1 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=8.1.3, <=8.2.13)

@angular/upgrade NPM version =8.1.3, =1005.9.0, =1.8.2, =1.0.135, =2.0.20 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@c8y/apps (>=9.25.1, <=1005.8.0), cmf.angular (2.0.0-71817) +2 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=7.0.0, <=7.2.13)

@angular/upgrade NPM version =7.0.0, =9.25.1, =0.5.5, =2.0.0-beta.1, =2.0.0-beta.2 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

angular-meihongtest2 (>=0.0.1-alpha.0, <=1.0.4) potentially affected by CVE-2021-4231 via @angular/upgrade (9.0.7)

@angular/upgrade NPM version 9.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/upgrade and may be impacted: - angular-meihongtest2 =0.0.1-alpha.0, =1.0.4 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...