PT-2026-133834

TuxCare rebuilt 5 @angular packages to address 1 CVE. Fixed in 10.2.5-tuxcare.6...

PT-2026-133835

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.14-tuxcare.9...

PT-2026-133828

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 7.2.16-tuxcare.7...

PT-2026-133938

TuxCare rebuilt @angular/language-service to address 1 CVE. Fixed in 19.2.18-tuxcare.6...

@augustalabs/ki-assistent (>=1.0.8, <=1.0.14), @bitblit/ngx-acute-common (>=6.1.196-alpha, <=6.1.209-alpha) +17 more potentially affected by CVE-2026-111751 via @angular/router (>=21.2.0, <=21.2.22)

@angular/router NPM version =21.2.0, =1.0.8, =6.1.196-alpha, =6.1.196-alpha, =0.1.0, =21.2.0-snapshot-1772819386488, =21.2.0-snapshot-1772819386488, =6.0.1, =2.0.1, =0.19.0, =14.0.0, =0.107.1, =0.107.1, =0.5.1, =0.5.11 and more Source cves: CVE-2026-111751 Source advisory: MEND:CVE-2026-111751...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.28), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-111751 via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-111751 Source advisory: MEND:CVE-2026-111751...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.28), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-111752 via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-111752 Source advisory: MEND:CVE-2026-111752...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-111752 via @angular/router (>=20.0.0, <=20.3.25)

@angular/router NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.0.60 and more Source cves: CVE-2026-111752 Source advisory: MEND:CVE-2026-111752...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +36 more potentially affected by CVE-2026-111752 via @angular/router (>=21.0.0, <=21.2.22)

@angular/router NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-next.10, =21.0.0-next.10, =3.0.1, =6.0.1, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-111752 Source advisory: MEND:CVE-2026-111752...

@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=21.0.0, <=21.0.2)

@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: MEND:CVE-2026-111753...

CVE-2026-111753

An incomplete fix for "GHSA-58c5-g7wp-6w37" https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37 "CVE-2025-66035" in "@angular/common"'s HTTP Client "HttpClient" allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=20.0.0, <=20.3.29)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: MEND:CVE-2026-111754...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: MEND:CVE-2026-111754...

CLSA-2026-1792386713 TuxCare security update for @angular/service-worker (2 CVEs)

TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 10.2.5-tuxcare.10...

CLSA-2026-1792386714 TuxCare security update for @angular/service-worker (2 CVEs)

TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 15.2.2-tuxcare.3...

CLSA-2026-1792386712 TuxCare security update for @angular/service-worker (1 CVE)

TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 17.1.0-tuxcare.3...

CLSA-2026-1792386711 TuxCare security update for @angular/service-worker (1 CVE)

TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 9.1.13-tuxcare.11...

CLSA-2026-1792386590 TuxCare security update for @angular/service-worker (3 CVEs)

TuxCare rebuilt @angular/service-worker to address 3 CVEs. Fixed in 16.2.7-tuxcare.3...

CLSA-2026-1792386589 TuxCare security update for @angular/service-worker (1 CVE)

TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 5.1.0-tuxcare.4...