CLSA-2026-1773706638 TuxCare security update for angular (28 CVEs)

TuxCare rebuilt angular to address 28 CVEs. Fixed in 1.7.9-tuxcare.1...

ROOT-APP-NPM-CVE-2024-21490 CVE-2024-21490 in angular - Patched by Root

Root has patched CVE-2024-21490 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-26118 CVE-2023-26118 in angular - Patched by Root

Root has patched CVE-2023-26118 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-10768 CVE-2019-10768 in angular - Patched by Root

Root has patched CVE-2019-10768 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-26117 CVE-2023-26117 in angular - Patched by Root

Root has patched CVE-2023-26117 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-28HP-FGCR-2R4H GHSA-28hp-fgcr-2r4h in angular - Patched by Root

Root has patched GHSA-28hp-fgcr-2r4h in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-5CP4-XMRW-59WF GHSA-5cp4-xmrw-59wf in angular - Patched by Root

Root has patched GHSA-5cp4-xmrw-59wf in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-26116 CVE-2023-26116 in angular - Patched by Root

Root has patched CVE-2023-26116 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-8372 CVE-2024-8372 in angular - Patched by Root

Root has patched CVE-2024-8372 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-14863 CVE-2019-14863 in angular - Patched by Root

Root has patched CVE-2019-14863 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-11998 CVE-2026-11998 in angular - Patched by Root

Root has patched CVE-2026-11998 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-0716 CVE-2025-0716 in angular - Patched by Root

Root has patched CVE-2025-0716 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-8373 CVE-2024-8373 in angular - Patched by Root

Root has patched CVE-2024-8373 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7676 CVE-2020-7676 in angular - Patched by Root

Root has patched CVE-2020-7676 in the angular package for Root:npm. Multiple fixed versions available...

CVE-2026-69151

A flaw was found in the Angular compiler's internationalization i18n pipeline. This vulnerability allows a lower-trust translation file to replace a static event handler with executable JavaScript. A remote attacker could exploit this by injecting malicious scripts, leading to Cross-Site Scriptin...

Cross-site Scripting (XSS)

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Cross-site Scripting XSS in the bundled domino DOM serializer, which does not escape text nodes inside the fallback raw-content elements , , , and during SSR...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-69149 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-69149 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-18550630...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-69149 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-69149 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-18550630...

CVE-2026-69151

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler attributes, allowing a lower-trust...

CVE-2026-69149

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting XSS vulnerability exists in @angular/platform-server's DOM emulation dependency domino when serializing...