CLSA-2026-1778460307 TuxCare security update for @nguniversal (1 CVE)

TuxCare rebuilt 7 @nguniversal packages to address 1 CVE. Fixed in 10.1.0-tuxcare.1...

@nestjs/ng-universal (>=7.1.0, <=7.1.1) potentially affected by CVE-2026-27739 via @nguniversal/express-engine (16.0.0)

@nguniversal/express-engine NPM version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @nguniversal/express-engine and may be impacted: - @nestjs/ng-universal =7.1.0, =7.1.1 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

@nestjs/ng-universal (>=7.1.0, <=7.1.1), @nguniversal/builders (>=16.0.0-next.0, <=16.1.3) +1 more potentially affected by CVE-2026-27739 via @nguniversal/common (>=16.0.0, <=16.1.3)

@nguniversal/common NPM version =16.0.0, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =16.1.3 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

@nestjs/ng-universal (>=7.1.0, <=7.1.1), @nguniversal/builders (>=16.0.0-next.0, <=16.1.3) +1 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.1.3)

@nguniversal/common NPM version =16.0.0, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =16.1.3 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...

@builder.io/angular (>=1.0.1, <=3.0.2), @gleb216/fn.nestjs.core.modules (>=0.0.127, <=0.0.158) +8 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.2.0-rc.0)

@nguniversal/common NPM version =16.0.0, =1.0.1, =0.0.127, =7.0.2, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =0.3.2, =1.2.0 Source cves: CVE-2025-59052 Source advisory: SNYK:JS-NGUNIVERSALCOMMON-12613577...

@nguniversal/builders (>=16.1.0-next.0, <=16.1.1), @nguniversal/express-engine (>=16.1.0-next.0, <=16.1.1) potentially affected by unknown CVE via @nguniversal/common (>=16.1.0, <=16.1.1)

@nguniversal/common NPM version =16.1.0, =16.1.0-next.0, =16.1.0-next.0, =16.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3HF-Q8Q7-FV2P...