PT-2026-126947

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 7.2.16-tuxcare.11...

PT-2026-127007

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 11.2.0-tuxcare.1...

PT-2026-126968

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 11.2.0-tuxcare.2...

PT-2026-126916

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 15.2.1-tuxcare.6...

PT-2026-126772

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 13.4.0-tuxcare.4...

PT-2026-126761

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 7.2.16-tuxcare.4...

PT-2026-127002

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 14.3.0-tuxcare.4...

PT-2026-127061

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 17.1.0-tuxcare.3...

PT-2026-127003

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 15.2.10-tuxcare.4...

PT-2026-127048

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 15.2.9-tuxcare.3...

PT-2026-127028

TuxCare rebuilt @angular/compiler to address 17 CVEs. Fixed in 18.1.2-tuxcare.2...

PT-2026-126984

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 5.1.2-tuxcare.4...

PT-2026-127016

TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 16.2.7-tuxcare.3...

PT-2026-126924

TuxCare rebuilt @angular/compiler to address 5 CVEs. Fixed in 19.2.25-tuxcare.5...

PT-2026-126946

TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 4.3.5-tuxcare.4...

PT-2026-127054

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 8.0.0-tuxcare.2...

Security Bulletin: Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1

Summary Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54265 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17,...

SUSE CVE-2026-88057

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

GHSA-HH8M-FM6V-7CVG Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...