CLSA-2026-1792325316 TuxCare security update for @angular/compiler-cli (1 CVE)

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 13.3.0-tuxcare.1...

CLSA-2026-1792325314 TuxCare security update for @angular/compiler-cli (1 CVE)

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 16.2.7-tuxcare.1...

CLSA-2026-1792325315 TuxCare security update for @angular/compiler-cli (1 CVE)

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 15.2.6-tuxcare.1...

CLSA-2026-1792325295 TuxCare security update for @angular/compiler-cli (1 CVE)

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 18.2.14-tuxcare.1...

CLSA-2026-1792325289 TuxCare security update for @angular/compiler-cli (1 CVE)

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 14.3.0-tuxcare.1...

CVE-2026-103061

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

EUVD-2026-97758

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

EEF-CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Summary Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an ap...

CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

CVE-2026-103061

The gleam-lang gleam compiler is vulnerable to a Path Traversal (CWE-22) issue in versions 0.32.4 through 1.19.2 . The root cause is the lack of validation on the app field within Hex package metadata, which the compiler uses to determine build directory names. A malicious publisher can provide a...

PT-2026-110870

Name of the Vulnerable Software and Affected Versions gleam versions 0.32.4 through 1.19.1 Description A path traversal issue exists where a malicious package publisher can cause the deletion of directories outside the project build directory. This occurs because Gleam reads the app field from th...

@ngx-devtools/build (>=1.3.0, <=1.4.0), angular5-canvas-drawer (>=1.1.8-bata.1, <=1.2.1) +15 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=6.0.0, <=6.1.9)

@angular/compiler-cli NPM version =6.0.0, =1.3.0, =1.1.8-bata.1, =5.1.0, =2.0.0, =1.7.10, =0.0.0, =2.0.4, =1.23.7, =2.2.2, =1.0.4, =0.3.19, =1.2.3, =1.3.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@daybreaksoft/angular-elastic-ui (1.0.0-beta.2), @ionic/angular (0.0.2-0) +107 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=5.0.0, <=5.2.10)

@angular/compiler-cli NPM version =5.0.0, =2.0.6-rc.0, =1.0.0, =1.1.8, =5.1.1, =1.0.0, =0.0.8, =0.6.0, =1.7.2, =1.0.93, =0.0.0-beta.1, =1.1.1, =0.0.1, =1.2.3 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@chat21/chat21-ionic (>=1.0.2-1.beta.1, <=2.0.14), @hmcts/ccd-case-ui-toolkit (>=2.4.0, <=7.0.19-case-flags-case-level-flag-table-display) +19 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=7.0.0, <=7.2.13)

@angular/compiler-cli NPM version =7.0.0, =1.0.2-1.beta.1, =2.4.0, =1.0.1, =2.2.3-alpha.0, =4.44.6-alpha.10, =1.3.2, =3.0.0, =0.0.1, =1.2.1-beta.777, =0.0.1, =0.0.7, =3.1.0, =0.0.0-sr4, =4.0.0-beta.0, =4.0.1-beta.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@bb-cli/schematics (>=0.0.1-alpha.1, <=3.3.1), @flowaccount/nx-serverless (>=0.0.1, <=0.0.2) +24 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=8.0.0, <=8.2.12)

@angular/compiler-cli NPM version =8.0.0, =0.0.1-alpha.1, =0.0.1, =1.0.1, =1.2.0, =1.0.1, =1.7.113-beta.0, =1.10.0, =8.4.0-beta.4, =8.4.0-beta.5, =8.4.0-beta.4, =8.5.0-beta.1, =8.4.0-beta.4, =8.4.0-beta.3, =8.8.0-beta.4 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@bb-cli/schematics (3.0.0-pr.0), @eui/deps-base (>=7.15.0-snapshot-1585667137763.0, <=9.0.1-85) +19 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=9.0.6, <=9.1.12)

@angular/compiler-cli NPM version =9.0.6, =7.15.0-snapshot-1585667137763.0, =0.1.20, =0.1.8, =9.112.0-dev.0, =0.0.3, =5.0.11, =0.0.4, =0.0.13, =2.0.83, =2.0.83, =0.0.10, =3.0.10, =1.0.16, =1.0.21 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@beenotung/tslib (>=1.0.0, <=3.4.1), @blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1) +199 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=4.0.0, <=4.4.6)

@angular/compiler-cli NPM version =4.0.0, =1.0.0, =1.10.0, =1.10.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =0.0.1, =0.1.0, =2.4.6-scm.5, =2.4.9 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...