PT-2026-127071

TuxCare rebuilt @angular/compiler to address 14 CVEs. Fixed in 8.0.0-tuxcare.3...

PT-2026-127070

TuxCare rebuilt @angular/compiler to address 15 CVEs. Fixed in 15.2.9-tuxcare.2...

PT-2026-126997

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 13.3.12-tuxcare.3...

PT-2026-127010

TuxCare rebuilt @angular/compiler to address 10 CVEs. Fixed in 5.1.0-tuxcare.2...

PT-2026-127044

TuxCare rebuilt @angular/compiler to address 13 CVEs. Fixed in 11.2.11-tuxcare.3...

PT-2026-127076

TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 7.2.11-tuxcare.4...

PT-2026-127041

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 10.1.0-tuxcare.2...

PT-2026-127050

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 10.1.0-tuxcare.1...

PT-2026-127035

TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 13.3.12-tuxcare.1...

PT-2026-127079

TuxCare rebuilt @angular/compiler to address 11 CVEs. Fixed in 6.0.1-tuxcare.4...

PT-2026-127056

TuxCare rebuilt @angular/compiler to address 14 CVEs. Fixed in 17.3.12-tuxcare.13...

PT-2026-126830

TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 18.1.2-tuxcare.4...

Security Bulletin: Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1

Summary Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54265 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17,...

SUSE CVE-2026-88057

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +23 more potentially affected by CVE-2026-88057 via @angular/compiler (>=21.0.0, <=21.2.19)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =1.0.0, =4.4.0-beta.2, =0.19.0, =14.0.0, =1.0.0-next.27766, =1.0.77-rc.1, =1.0.87 and more Source cves: CVE-2026-88057 Source advisory:...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.28), @angelmartz/template-drawer-navigation-ng (9.1.0) +18 more potentially affected by CVE-2026-88057 via @angular/compiler (>=22.0.0, <=22.0.8)

@angular/compiler NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =23.0.0-alpha.2, =23.0.0-alpha.2, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-88057 Source advisory: SNYK:JS-ANGULARCOMPILER-19778381...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +301 more potentially affected by CVE-2026-88057 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-88057 Source advisory: OSV:GHSA-HH8M-FM6V-7CVG...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +301 more potentially affected by CVE-2026-88057 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-88057 Source advisory: GHSA-HH8M-FM6V-7CVG...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +36 more potentially affected by CVE-2026-88057 via @angular/compiler (>=20.0.0-rc.0, <=20.3.21)

@angular/compiler NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-88057 Source...