CVE-2025-66412
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Active
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
- Record
CVE-2025-66412- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2025-200118
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
- Record
EUVD-2025-200118- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-v4hv-rgfq-gp49
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts.
Additionally, a related vulnerability exists involving SVG animation elements (<animate>, <set>, <animateMotion>, <animateTransform>). The attributeName attribute on these elements was not properly validated, allowing attackers to dynamically target security-sensitive attributes like href or xlink:href on other elements. By binding attributeName to "href" and providing a javascript: URL in the values or to attribute, an attacker could bypass sanitization and execute arbitrary code.
Attributes confirmed to be vulnerable include:
- SVG-related attributes: (e.g.,
xlink:href), and various MathML attributes (e.g.,math|href,annotation|href). - SVG animation
attributeNameattribute when bound to "href" or "xlink:href".
When template binding is used to assign untrusted, user-controlled data to these attributes (e.g., [attr.xlink:href]="maliciousURL" or <animate [attributeName]="'href'" [values]="maliciousURL">), the compiler incorrectly falls back to a non-sanitizing context or fails to block the dangerous attribute assignment. This allows an attacker to inject a javascript:URL payload. Upon user interaction (like a click) on the element, or automatically in the case of animations, the malicious JavaScript executes in the context of the application's origin.
Impact
When exploited, this vulnerability allows an attacker to execute arbitrary code within the context of the vulnerable application's domain. This enables:
- Session Hijacking: Stealing session cookies and authentication tokens.
- Data Exfiltration: Capturing and transmitting sensitive user data.
- Unauthorized Actions: Performing actions on behalf of the user.
Patches
- 19.2.17
- 20.3.15
- 21.0.2
Attack Preconditions
- The victim's Angular application must render data derived from untrusted input (e.g., from a database or API) and bind it to one of the unsanitized URL attributes or the
attributeNameof an SVG animation element. - The victim must perform a user interaction (e.g., clicking) on the compromised element for the stored script to execute, or the animation must trigger the execution.
Workarounds
If you cannot upgrade, you can workaround the issue by ensuring that any data bound to the vulnerable attributes is never sourced from untrusted user input (e.g., database, API response, URL parameters).
- Avoid Affected Template Bindings: Specifically avoid using template bindings (e.g.,
[attr.xlink:href]="maliciousURL") to assign untrusted data to the vulnerable SVG/MathML attributes. - Avoid Dynamic
attributeNameon SVG Animations: Do not bind untrusted data to theattributeNameattribute of SVG animation elements (<animate>,<set>, etc.). - Enable Content Security Policy (CSP): Configure a robust CSP header that disallows
javascript:URLs.
- Record
GHSA-v4hv-rgfq-gp49- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-79
- Updated
- 2026-11-02
NVD
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
- Record
CVE-2025-66412- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSV
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
- Record
CVE-2025-66412- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-66412
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
- Record
DEBIAN-CVE-2025-66412- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
Show 48 moreShow less
OSVGHSA-v4hv-rgfq-gp49
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts.
Additionally, a related vulnerability exists involving SVG animation elements (<animate>, <set>, <animateMotion>, <animateTransform>). The attributeName attribute on these elements was not properly validated, allowing attackers to dynamically target security-sensitive attributes like href or xlink:href on other elements. By binding attributeName to "href" and providing a javascript: URL in the values or to attribute, an attacker could bypass sanitization and execute arbitrary code.
Attributes confirmed to be vulnerable include:
- SVG-related attributes: (e.g.,
xlink:href), and various MathML attributes (e.g.,math|href,annotation|href). - SVG animation
attributeNameattribute when bound to "href" or "xlink:href".
When template binding is used to assign untrusted, user-controlled data to these attributes (e.g., [attr.xlink:href]="maliciousURL" or <animate [attributeName]="'href'" [values]="maliciousURL">), the compiler incorrectly falls back to a non-sanitizing context or fails to block the dangerous attribute assignment. This allows an attacker to inject a javascript:URL payload. Upon user interaction (like a click) on the element, or automatically in the case of animations, the malicious JavaScript executes in the context of the application's origin.
Impact
When exploited, this vulnerability allows an attacker to execute arbitrary code within the context of the vulnerable application's domain. This enables:
- Session Hijacking: Stealing session cookies and authentication tokens.
- Data Exfiltration: Capturing and transmitting sensitive user data.
- Unauthorized Actions: Performing actions on behalf of the user.
Patches
- 19.2.17
- 20.3.15
- 21.0.2
Attack Preconditions
- The victim's Angular application must render data derived from untrusted input (e.g., from a database or API) and bind it to one of the unsanitized URL attributes or the
attributeNameof an SVG animation element. - The victim must perform a user interaction (e.g., clicking) on the compromised element for the stored script to execute, or the animation must trigger the execution.
Workarounds
If you cannot upgrade, you can workaround the issue by ensuring that any data bound to the vulnerable attributes is never sourced from untrusted user input (e.g., database, API response, URL parameters).
- Avoid Affected Template Bindings: Specifically avoid using template bindings (e.g.,
[attr.xlink:href]="maliciousURL") to assign untrusted data to the vulnerable SVG/MathML attributes. - Avoid Dynamic
attributeNameon SVG Animations: Do not bind untrusted data to theattributeNameattribute of SVG animation elements (<animate>,<set>, etc.). - Enable Content Security Policy (CSP): Configure a robust CSP header that disallows
javascript:URLs.
- Record
GHSA-v4hv-rgfq-gp49- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVRHSA-2026:33371
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.18 security update
- Record
RHSA-2026:33371- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-66412
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
- Record
UBUNTU-CVE-2025-66412- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1775175794 No score
TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 4 @angular packages to address 2 CVEs. Fixed in 7.2.16-tuxcare.4.
- Record
CLSA-2026-1775175794- Updated
- 2026-11-02
OSVCLSA-2026-1775176142 No score
TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 4 @angular packages to address 2 CVEs. Fixed in 5.2.11-tuxcare.4.
- Record
CLSA-2026-1775176142- Updated
- 2026-11-02
OSVCLSA-2026-1775176146 No score
TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 4 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.4.
- Record
CLSA-2026-1775176146- Updated
- 2026-11-02
OSVCLSA-2026-1775176150 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 8.2.14-tuxcare.4.
- Record
CLSA-2026-1775176150- Updated
- 2026-11-02
OSVCLSA-2026-1775176152 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 9.1.13-tuxcare.2.
- Record
CLSA-2026-1775176152- Updated
- 2026-11-02
OSVCLSA-2026-1775176157 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 10.2.5-tuxcare.2.
- Record
CLSA-2026-1775176157- Updated
- 2026-11-02
OSVCLSA-2026-1775176159 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.14-tuxcare.2.
- Record
CLSA-2026-1775176159- Updated
- 2026-11-02
OSVCLSA-2026-1775176161 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.17-tuxcare.2.
- Record
CLSA-2026-1775176161- Updated
- 2026-11-02
OSVCLSA-2026-1775176163 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.4.0-tuxcare.2.
- Record
CLSA-2026-1775176163- Updated
- 2026-11-02
OSVCLSA-2026-1775176167 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 14.3.0-tuxcare.4.
- Record
CLSA-2026-1775176167- Updated
- 2026-11-02
OSVCLSA-2026-1775176172 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 15.2.10-tuxcare.5.
- Record
CLSA-2026-1775176172- Updated
- 2026-11-02
OSVCLSA-2026-1775176176 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 16.2.12-tuxcare.5.
- Record
CLSA-2026-1775176176- Updated
- 2026-11-02
OSVCLSA-2026-1775176181 No score
TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 17.3.12-tuxcare.5.
- Record
CLSA-2026-1775176181- Updated
- 2026-11-02
OSVCLSA-2026-1775176184 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.14-tuxcare.3.
- Record
CLSA-2026-1775176184- Updated
- 2026-11-02
OSVCLSA-2026-1781225627 No score
TuxCare security update for @angular/platform-webworker-dynamic (1 CVE)
TuxCare rebuilt @angular/platform-webworker-dynamic to address 1 CVE. Fixed in 4.3.5-tuxcare.2.
- Record
CLSA-2026-1781225627- Updated
- 2026-11-02
OSVCLSA-2026-1781225629 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 5.1.0-tuxcare.1.
- Record
CLSA-2026-1781225629- Updated
- 2026-11-02
OSVCLSA-2026-1781571270 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 8.0.3-tuxcare.3.
- Record
CLSA-2026-1781571270- Updated
- 2026-11-02
OSVCLSA-2026-1781571279 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 5.2.7-tuxcare.2.
- Record
CLSA-2026-1781571279- Updated
- 2026-11-02
OSVCLSA-2026-1781571280 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 6.0.1-tuxcare.3.
- Record
CLSA-2026-1781571280- Updated
- 2026-11-02
OSVCLSA-2026-1781571281 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 8.0.0-tuxcare.2.
- Record
CLSA-2026-1781571281- Updated
- 2026-11-02
OSVCLSA-2026-1781657683 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 10.1.0-tuxcare.2.
- Record
CLSA-2026-1781657683- Updated
- 2026-11-02
OSVCLSA-2026-1781657684 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.0.0-tuxcare.2.
- Record
CLSA-2026-1781657684- Updated
- 2026-11-02
OSVCLSA-2026-1781657685 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.0-tuxcare.2.
- Record
CLSA-2026-1781657685- Updated
- 2026-11-02
OSVCLSA-2026-1781657687 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.16-tuxcare.2.
- Record
CLSA-2026-1781657687- Updated
- 2026-11-02
OSVCLSA-2026-1781657688 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 7.2.1-tuxcare.2.
- Record
CLSA-2026-1781657688- Updated
- 2026-11-02
OSVCLSA-2026-1781657695 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.0-tuxcare.2.
- Record
CLSA-2026-1781657695- Updated
- 2026-11-02
OSVCLSA-2026-1781657706 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.11-tuxcare.2.
- Record
CLSA-2026-1781657706- Updated
- 2026-11-02
OSVCLSA-2026-1783040443 No score
TuxCare security update for @angular (16 CVEs)
TuxCare rebuilt 3 @angular packages to address 16 CVEs. Fixed in 16.2.7-tuxcare.2.
- Record
CLSA-2026-1783040443- Updated
- 2026-11-02
OSVCLSA-2026-1783040463 No score
TuxCare security update for @angular (20 CVEs)
TuxCare rebuilt 3 @angular packages to address 20 CVEs. Fixed in 16.2.11-tuxcare.1.
- Record
CLSA-2026-1783040463- Updated
- 2026-11-02
OSVCLSA-2026-1783126875 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.1.2-tuxcare.3.
- Record
CLSA-2026-1783126875- Updated
- 2026-11-02
OSVCLSA-2026-1783213288 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 15.0.3-tuxcare.3.
- Record
CLSA-2026-1783213288- Updated
- 2026-11-02
OSVCLSA-2026-1783213295 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.12-tuxcare.3.
- Record
CLSA-2026-1783213295- Updated
- 2026-11-02
OSVCLSA-2026-1783213296 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.3.12-tuxcare.3.
- Record
CLSA-2026-1783213296- Updated
- 2026-11-02
OSVCLSA-2026-1783213297 No score
TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 17.1.0-tuxcare.3.
- Record
CLSA-2026-1783213297- Updated
- 2026-11-02
OSVCLSA-2026-1783213298 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.3.0-tuxcare.3.
- Record
CLSA-2026-1783213298- Updated
- 2026-11-02
OSVCLSA-2026-1783299705 No score
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 14.2.8-tuxcare.3.
- Record
CLSA-2026-1783299705- Updated
- 2026-11-02
OSVCLSA-2026-1792160914 No score
TuxCare security update for @angular/animations (1 CVE)
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 6.1.10-tuxcare.4.
- Record
CLSA-2026-1792160914- Updated
- 2026-11-02
OSVCLSA-2026-1792160915 No score
TuxCare security update for @angular/animations (1 CVE)
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 12.2.17-tuxcare.2.
- Record
CLSA-2026-1792160915- Updated
- 2026-11-02
OSVCLSA-2026-1792160921 No score
TuxCare security update for @angular/animations (1 CVE)
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 11.2.0-tuxcare.2.
- Record
CLSA-2026-1792160921- Updated
- 2026-11-02
OSVCLSA-2026-1792160979 No score
TuxCare security update for @angular/router (1 CVE)
TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 7.2.16-tuxcare.4.
- Record
CLSA-2026-1792160979- Updated
- 2026-11-02
OSVCLSA-2026-1792160983 No score
TuxCare security update for @angular/router (1 CVE)
TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 4.3.5-tuxcare.2.
- Record
CLSA-2026-1792160983- Updated
- 2026-11-02
OSVCLSA-2026-1792160986 No score
TuxCare security update for @angular/router (2 CVEs)
TuxCare rebuilt @angular/router to address 2 CVEs. Fixed in 5.1.2-tuxcare.3.
- Record
CLSA-2026-1792160986- Updated
- 2026-11-02
OSVCLSA-2026-1792160987 No score
TuxCare security update for @angular/router (1 CVE)
TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.2.8-tuxcare.3.
- Record
CLSA-2026-1792160987- Updated
- 2026-11-02
OSVCLSA-2026-1792161083 No score
TuxCare security update for @angular/animations (1 CVE)
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 7.2.16-tuxcare.4.
- Record
CLSA-2026-1792161083- Updated
- 2026-11-02
OSVCLSA-2026-1792161087 No score
TuxCare security update for @angular/animations (1 CVE)
TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 5.2.11-tuxcare.4.
- Record
CLSA-2026-1792161087- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
@angular/compilernpm |
21.0.0-next.0 up to 21.0.2 | 21.0.2 |
@angular/compilernpm |
20.0.0-next.0 up to 20.3.15 | 20.3.15 |
@angular/compilernpm |
19.0.0-next.0 up to 19.2.17 | 19.2.17 |
@angular/compilernpm |
through 18.2.14 | None known |
@angular/bazelTuxCare:npm From an advisory covering 2 CVEs |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/httpTuxCare:npm From an advisory covering 2 CVEs |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/platform-webworkerTuxCare:npm From an advisory covering 2 CVEs |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/platform-webworker-dynamicTuxCare:npm From an advisory covering 2 CVEs |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/bazelTuxCare:npm From an advisory covering 2 CVEs |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/httpTuxCare:npm From an advisory covering 2 CVEs |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
Show 212 moreShow less
| Package | Affected | Fixed |
|---|---|---|
@angular/platform-webworkerTuxCare:npm From an advisory covering 2 CVEs |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/platform-webworker-dynamicTuxCare:npm From an advisory covering 2 CVEs |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/bazelTuxCare:npm From an advisory covering 2 CVEs |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/httpTuxCare:npm From an advisory covering 2 CVEs |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/platform-webworkerTuxCare:npm From an advisory covering 2 CVEs |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/platform-webworker-dynamicTuxCare:npm From an advisory covering 2 CVEs |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/bazelTuxCare:npm |
8.2.14-tuxcare.0 up to 8.2.14-tuxcare.4, plus listed versions 8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.3 |
8.2.14-tuxcare.4 |
@angular/platform-webworker-dynamicTuxCare:npm |
8.2.14-tuxcare.0 up to 8.2.14-tuxcare.4, plus listed versions 8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.3 |
8.2.14-tuxcare.4 |
@angular/bazelTuxCare:npm |
9.1.13-tuxcare.0 up to 9.1.13-tuxcare.2, plus listed versions 9.1.139.1.13-tuxcare.1 |
9.1.13-tuxcare.2 |
@angular/platform-webworker-dynamicTuxCare:npm |
9.1.13-tuxcare.0 up to 9.1.13-tuxcare.2, plus listed versions 9.1.139.1.13-tuxcare.1 |
9.1.13-tuxcare.2 |
@angular/bazelTuxCare:npm |
10.2.5-tuxcare.0 up to 10.2.5-tuxcare.2, plus listed versions 10.2.510.2.5-tuxcare.1 |
10.2.5-tuxcare.2 |
@angular/platform-webworker-dynamicTuxCare:npm |
10.2.5-tuxcare.0 up to 10.2.5-tuxcare.2, plus listed versions 10.2.510.2.5-tuxcare.1 |
10.2.5-tuxcare.2 |
@angular/bazelTuxCare:npm |
11.2.14-tuxcare.0 up to 11.2.14-tuxcare.2, plus listed versions 11.2.1411.2.14-tuxcare.1 |
11.2.14-tuxcare.2 |
@angular/bazelTuxCare:npm |
12.2.17-tuxcare.0 up to 12.2.17-tuxcare.2, plus listed versions 12.2.1712.2.17-tuxcare.1 |
12.2.17-tuxcare.2 |
@angular/bazelTuxCare:npm |
13.4.0-tuxcare.0 up to 13.4.0-tuxcare.2, plus listed versions 13.4.013.4.0-tuxcare.1 |
13.4.0-tuxcare.2 |
@angular/bazelTuxCare:npm |
14.3.0-tuxcare.0 up to 14.3.0-tuxcare.4, plus listed versions 14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.3 |
14.3.0-tuxcare.4 |
@angular/bazelTuxCare:npm |
15.2.10-tuxcare.0 up to 15.2.10-tuxcare.5, plus listed versions 15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.4 |
15.2.10-tuxcare.5 |
@angular/bazelTuxCare:npm |
16.2.12-tuxcare.0 up to 16.2.12-tuxcare.5, plus listed versions 16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4 |
16.2.12-tuxcare.5 |
@angular/benchpressTuxCare:npm |
16.2.12-tuxcare.0 up to 16.2.12-tuxcare.5, plus listed versions 16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4 |
16.2.12-tuxcare.5 |
@angular/language-serviceTuxCare:npm |
16.2.12-tuxcare.0 up to 16.2.12-tuxcare.5, plus listed versions 16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4 |
16.2.12-tuxcare.5 |
@angular/bazelTuxCare:npm From an advisory covering 2 CVEs |
17.3.12-tuxcare.0 up to 17.3.12-tuxcare.5, plus listed versions 17.3.1217.3.12-tuxcare.117.3.12-tuxcare.217.3.12-tuxcare.317.3.12-tuxcare.4 |
17.3.12-tuxcare.5 |
@angular/benchpressTuxCare:npm From an advisory covering 2 CVEs |
17.3.12-tuxcare.0 up to 17.3.12-tuxcare.5, plus listed versions 17.3.1217.3.12-tuxcare.117.3.12-tuxcare.217.3.12-tuxcare.317.3.12-tuxcare.4 |
17.3.12-tuxcare.5 |
@angular/language-serviceTuxCare:npm From an advisory covering 2 CVEs |
17.3.12-tuxcare.0 up to 17.3.12-tuxcare.5, plus listed versions 17.3.1217.3.12-tuxcare.117.3.12-tuxcare.217.3.12-tuxcare.317.3.12-tuxcare.4 |
17.3.12-tuxcare.5 |
@angular/bazelTuxCare:npm |
18.2.14-tuxcare.0 up to 18.2.14-tuxcare.3, plus listed versions 18.2.1418.2.14-tuxcare.118.2.14-tuxcare.2 |
18.2.14-tuxcare.3 |
@angular/benchpressTuxCare:npm |
18.2.14-tuxcare.0 up to 18.2.14-tuxcare.3, plus listed versions 18.2.1418.2.14-tuxcare.118.2.14-tuxcare.2 |
18.2.14-tuxcare.3 |
@angular/language-serviceTuxCare:npm |
18.2.14-tuxcare.0 up to 18.2.14-tuxcare.3, plus listed versions 18.2.1418.2.14-tuxcare.118.2.14-tuxcare.2 |
18.2.14-tuxcare.3 |
@angular/platform-webworker-dynamicTuxCare:npm |
4.3.5-tuxcare.0 up to 4.3.5-tuxcare.2, plus listed versions 4.3.54.3.5-tuxcare.1 |
4.3.5-tuxcare.2 |
@angular/bazelTuxCare:npm |
5.1.0-tuxcare.0 up to 5.1.0-tuxcare.1, plus listed versions 5.1.0 |
5.1.0-tuxcare.1 |
@angular/platform-webworker-dynamicTuxCare:npm |
5.1.0-tuxcare.0 up to 5.1.0-tuxcare.1, plus listed versions 5.1.0 |
5.1.0-tuxcare.1 |
@angular/bazelTuxCare:npm |
8.0.3-tuxcare.0 up to 8.0.3-tuxcare.3, plus listed versions 8.0.38.0.3-tuxcare.18.0.3-tuxcare.2 |
8.0.3-tuxcare.3 |
@angular/platform-webworker-dynamicTuxCare:npm |
8.0.3-tuxcare.0 up to 8.0.3-tuxcare.3, plus listed versions 8.0.38.0.3-tuxcare.18.0.3-tuxcare.2 |
8.0.3-tuxcare.3 |
@angular/bazelTuxCare:npm |
5.2.7-tuxcare.0 up to 5.2.7-tuxcare.2, plus listed versions 5.2.75.2.7-tuxcare.1 |
5.2.7-tuxcare.2 |
@angular/platform-webworker-dynamicTuxCare:npm |
5.2.7-tuxcare.0 up to 5.2.7-tuxcare.2, plus listed versions 5.2.75.2.7-tuxcare.1 |
5.2.7-tuxcare.2 |
@angular/bazelTuxCare:npm |
6.0.1-tuxcare.0 up to 6.0.1-tuxcare.3, plus listed versions 6.0.16.0.1-tuxcare.16.0.1-tuxcare.2 |
6.0.1-tuxcare.3 |
@angular/platform-webworker-dynamicTuxCare:npm |
6.0.1-tuxcare.0 up to 6.0.1-tuxcare.3, plus listed versions 6.0.16.0.1-tuxcare.16.0.1-tuxcare.2 |
6.0.1-tuxcare.3 |
@angular/bazelTuxCare:npm |
8.0.0-tuxcare.0 up to 8.0.0-tuxcare.2, plus listed versions 8.0.08.0.0-tuxcare.1 |
8.0.0-tuxcare.2 |
@angular/platform-webworker-dynamicTuxCare:npm |
8.0.0-tuxcare.0 up to 8.0.0-tuxcare.2, plus listed versions 8.0.08.0.0-tuxcare.1 |
8.0.0-tuxcare.2 |
@angular/bazelTuxCare:npm |
10.1.0-tuxcare.0 up to 10.1.0-tuxcare.2, plus listed versions 10.1.010.1.0-tuxcare.1 |
10.1.0-tuxcare.2 |
@angular/platform-webworker-dynamicTuxCare:npm |
10.1.0-tuxcare.0 up to 10.1.0-tuxcare.2, plus listed versions 10.1.010.1.0-tuxcare.1 |
10.1.0-tuxcare.2 |
@angular/bazelTuxCare:npm |
12.0.0-tuxcare.0 up to 12.0.0-tuxcare.2, plus listed versions 12.0.012.0.0-tuxcare.1 |
12.0.0-tuxcare.2 |
@angular/bazelTuxCare:npm |
12.2.0-tuxcare.0 up to 12.2.0-tuxcare.2, plus listed versions 12.2.012.2.0-tuxcare.1 |
12.2.0-tuxcare.2 |
@angular/bazelTuxCare:npm |
12.2.16-tuxcare.0 up to 12.2.16-tuxcare.2, plus listed versions 12.2.1612.2.16-tuxcare.1 |
12.2.16-tuxcare.2 |
@angular/bazelTuxCare:npm |
7.2.1-tuxcare.0 up to 7.2.1-tuxcare.2, plus listed versions 7.2.17.2.1-tuxcare.1 |
7.2.1-tuxcare.2 |
@angular/platform-webworker-dynamicTuxCare:npm |
7.2.1-tuxcare.0 up to 7.2.1-tuxcare.2, plus listed versions 7.2.17.2.1-tuxcare.1 |
7.2.1-tuxcare.2 |
@angular/bazelTuxCare:npm |
11.2.0-tuxcare.0 up to 11.2.0-tuxcare.2, plus listed versions 11.2.011.2.0-tuxcare.1 |
11.2.0-tuxcare.2 |
@angular/bazelTuxCare:npm |
11.2.11-tuxcare.0 up to 11.2.11-tuxcare.2, plus listed versions 11.2.1111.2.11-tuxcare.1 |
11.2.11-tuxcare.2 |
@angular/bazelTuxCare:npm From an advisory covering 16 CVEs |
16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions 16.2.716.2.7-tuxcare.1 |
16.2.7-tuxcare.2 |
@angular/benchpressTuxCare:npm From an advisory covering 16 CVEs |
16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions 16.2.716.2.7-tuxcare.1 |
16.2.7-tuxcare.2 |
@angular/language-serviceTuxCare:npm From an advisory covering 16 CVEs |
16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions 16.2.716.2.7-tuxcare.1 |
16.2.7-tuxcare.2 |
@angular/bazelTuxCare:npm From an advisory covering 20 CVEs |
16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions 16.2.11 |
16.2.11-tuxcare.1 |
@angular/benchpressTuxCare:npm From an advisory covering 20 CVEs |
16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions 16.2.11 |
16.2.11-tuxcare.1 |
@angular/language-serviceTuxCare:npm From an advisory covering 20 CVEs |
16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions 16.2.11 |
16.2.11-tuxcare.1 |
@angular/bazelTuxCare:npm |
18.1.2-tuxcare.0 up to 18.1.2-tuxcare.3, plus listed versions 18.1.218.1.2-tuxcare.118.1.2-tuxcare.2 |
18.1.2-tuxcare.3 |
@angular/benchpressTuxCare:npm |
18.1.2-tuxcare.0 up to 18.1.2-tuxcare.3, plus listed versions 18.1.218.1.2-tuxcare.118.1.2-tuxcare.2 |
18.1.2-tuxcare.3 |
@angular/language-serviceTuxCare:npm |
18.1.2-tuxcare.0 up to 18.1.2-tuxcare.3, plus listed versions 18.1.218.1.2-tuxcare.118.1.2-tuxcare.2 |
18.1.2-tuxcare.3 |
@angular/bazelTuxCare:npm |
15.0.3-tuxcare.0 up to 15.0.3-tuxcare.3, plus listed versions 15.0.315.0.3-tuxcare.115.0.3-tuxcare.2 |
15.0.3-tuxcare.3 |
@angular/bazelTuxCare:npm |
18.2.12-tuxcare.0 up to 18.2.12-tuxcare.3, plus listed versions 18.2.1218.2.12-tuxcare.118.2.12-tuxcare.2 |
18.2.12-tuxcare.3 |
@angular/benchpressTuxCare:npm |
18.2.12-tuxcare.0 up to 18.2.12-tuxcare.3, plus listed versions 18.2.1218.2.12-tuxcare.118.2.12-tuxcare.2 |
18.2.12-tuxcare.3 |
@angular/language-serviceTuxCare:npm |
18.2.12-tuxcare.0 up to 18.2.12-tuxcare.3, plus listed versions 18.2.1218.2.12-tuxcare.118.2.12-tuxcare.2 |
18.2.12-tuxcare.3 |
@angular/bazelTuxCare:npm |
13.3.12-tuxcare.0 up to 13.3.12-tuxcare.3, plus listed versions 13.3.1213.3.12-tuxcare.113.3.12-tuxcare.2 |
13.3.12-tuxcare.3 |
@angular/bazelTuxCare:npm |
17.1.0-tuxcare.0 up to 17.1.0-tuxcare.3, plus listed versions 17.1.017.1.0-tuxcare.117.1.0-tuxcare.2 |
17.1.0-tuxcare.3 |
@angular/benchpressTuxCare:npm |
17.1.0-tuxcare.0 up to 17.1.0-tuxcare.3, plus listed versions 17.1.017.1.0-tuxcare.117.1.0-tuxcare.2 |
17.1.0-tuxcare.3 |
@angular/language-serviceTuxCare:npm |
17.1.0-tuxcare.0 up to 17.1.0-tuxcare.3, plus listed versions 17.1.017.1.0-tuxcare.117.1.0-tuxcare.2 |
17.1.0-tuxcare.3 |
@angular/bazelTuxCare:npm |
13.3.0-tuxcare.0 up to 13.3.0-tuxcare.3, plus listed versions 13.3.013.3.0-tuxcare.113.3.0-tuxcare.2 |
13.3.0-tuxcare.3 |
@angular/bazelTuxCare:npm |
14.2.8-tuxcare.0 up to 14.2.8-tuxcare.3, plus listed versions 14.2.814.2.8-tuxcare.114.2.8-tuxcare.2 |
14.2.8-tuxcare.3 |
@angular/animationsTuxCare:npm |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/animationsTuxCare:npm |
12.2.17-tuxcare.0 up to 12.2.17-tuxcare.2, plus listed versions 12.2.1712.2.17-tuxcare.1 |
12.2.17-tuxcare.2 |
@angular/animationsTuxCare:npm |
11.2.0-tuxcare.0 up to 11.2.0-tuxcare.2, plus listed versions 11.2.011.2.0-tuxcare.1 |
11.2.0-tuxcare.2 |
@angular/routerTuxCare:npm |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/routerTuxCare:npm |
4.3.5-tuxcare.0 up to 4.3.5-tuxcare.2, plus listed versions 4.3.54.3.5-tuxcare.1 |
4.3.5-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 2 CVEs |
5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions 5.1.25.1.2-tuxcare.15.1.2-tuxcare.2 |
5.1.2-tuxcare.3 |
@angular/routerTuxCare:npm |
14.2.8-tuxcare.0 up to 14.2.8-tuxcare.3, plus listed versions 14.2.814.2.8-tuxcare.114.2.8-tuxcare.2 |
14.2.8-tuxcare.3 |
@angular/animationsTuxCare:npm |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/animationsTuxCare:npm |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/animationsTuxCare:npm |
8.2.14-tuxcare.0 up to 8.2.14-tuxcare.4, plus listed versions 8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.3 |
8.2.14-tuxcare.4 |
@angular/animationsTuxCare:npm |
9.1.13-tuxcare.0 up to 9.1.13-tuxcare.2, plus listed versions 9.1.139.1.13-tuxcare.1 |
9.1.13-tuxcare.2 |
@angular/animationsTuxCare:npm |
10.2.5-tuxcare.0 up to 10.2.5-tuxcare.2, plus listed versions 10.2.510.2.5-tuxcare.1 |
10.2.5-tuxcare.2 |
@angular/animationsTuxCare:npm |
11.2.14-tuxcare.0 up to 11.2.14-tuxcare.2, plus listed versions 11.2.1411.2.14-tuxcare.1 |
11.2.14-tuxcare.2 |
@angular/animationsTuxCare:npm |
13.4.0-tuxcare.0 up to 13.4.0-tuxcare.2, plus listed versions 13.4.013.4.0-tuxcare.1 |
13.4.0-tuxcare.2 |
@angular/animationsTuxCare:npm |
14.3.0-tuxcare.0 up to 14.3.0-tuxcare.4, plus listed versions 14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.3 |
14.3.0-tuxcare.4 |
@angular/animationsTuxCare:npm |
15.2.10-tuxcare.0 up to 15.2.10-tuxcare.5, plus listed versions 15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.4 |
15.2.10-tuxcare.5 |
@angular/animationsTuxCare:npm |
16.2.12-tuxcare.0 up to 16.2.12-tuxcare.5, plus listed versions 16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4 |
16.2.12-tuxcare.5 |
@angular/animationsTuxCare:npm |
17.3.12-tuxcare.0 up to 17.3.12-tuxcare.5, plus listed versions 17.3.1217.3.12-tuxcare.117.3.12-tuxcare.217.3.12-tuxcare.317.3.12-tuxcare.4 |
17.3.12-tuxcare.5 |
@angular/animationsTuxCare:npm |
18.2.14-tuxcare.0 up to 18.2.14-tuxcare.3, plus listed versions 18.2.1418.2.14-tuxcare.118.2.14-tuxcare.2 |
18.2.14-tuxcare.3 |
@angular/animationsTuxCare:npm |
4.3.5-tuxcare.0 up to 4.3.5-tuxcare.2, plus listed versions 4.3.54.3.5-tuxcare.1 |
4.3.5-tuxcare.2 |
@angular/animationsTuxCare:npm |
5.1.0-tuxcare.0 up to 5.1.0-tuxcare.1, plus listed versions 5.1.0 |
5.1.0-tuxcare.1 |
@angular/animationsTuxCare:npm |
8.0.3-tuxcare.0 up to 8.0.3-tuxcare.3, plus listed versions 8.0.38.0.3-tuxcare.18.0.3-tuxcare.2 |
8.0.3-tuxcare.3 |
@angular/animationsTuxCare:npm |
5.2.7-tuxcare.0 up to 5.2.7-tuxcare.2, plus listed versions 5.2.75.2.7-tuxcare.1 |
5.2.7-tuxcare.2 |
@angular/animationsTuxCare:npm |
6.0.1-tuxcare.0 up to 6.0.1-tuxcare.3, plus listed versions 6.0.16.0.1-tuxcare.16.0.1-tuxcare.2 |
6.0.1-tuxcare.3 |
@angular/animationsTuxCare:npm |
8.0.0-tuxcare.0 up to 8.0.0-tuxcare.2, plus listed versions 8.0.08.0.0-tuxcare.1 |
8.0.0-tuxcare.2 |
@angular/animationsTuxCare:npm |
10.1.0-tuxcare.0 up to 10.1.0-tuxcare.2, plus listed versions 10.1.010.1.0-tuxcare.1 |
10.1.0-tuxcare.2 |
@angular/animationsTuxCare:npm |
12.0.0-tuxcare.0 up to 12.0.0-tuxcare.2, plus listed versions 12.0.012.0.0-tuxcare.1 |
12.0.0-tuxcare.2 |
@angular/animationsTuxCare:npm |
12.2.0-tuxcare.0 up to 12.2.0-tuxcare.2, plus listed versions 12.2.012.2.0-tuxcare.1 |
12.2.0-tuxcare.2 |
@angular/animationsTuxCare:npm |
12.2.16-tuxcare.0 up to 12.2.16-tuxcare.2, plus listed versions 12.2.1612.2.16-tuxcare.1 |
12.2.16-tuxcare.2 |
@angular/animationsTuxCare:npm |
7.2.1-tuxcare.0 up to 7.2.1-tuxcare.2, plus listed versions 7.2.17.2.1-tuxcare.1 |
7.2.1-tuxcare.2 |
@angular/animationsTuxCare:npm |
11.2.11-tuxcare.0 up to 11.2.11-tuxcare.2, plus listed versions 11.2.1111.2.11-tuxcare.1 |
11.2.11-tuxcare.2 |
@angular/animationsTuxCare:npm From an advisory covering 14 CVEs |
7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions 7.2.0 |
7.2.0-tuxcare.1 |
@angular/animationsTuxCare:npm From an advisory covering 11 CVEs |
16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions 16.2.716.2.7-tuxcare.1 |
16.2.7-tuxcare.2 |
@angular/animationsTuxCare:npm From an advisory covering 10 CVEs |
15.2.1-tuxcare.0 up to 15.2.1-tuxcare.2, plus listed versions 15.2.115.2.1-tuxcare.1 |
15.2.1-tuxcare.2 |
@angular/animationsTuxCare:npm From an advisory covering 9 CVEs |
15.2.6-tuxcare.0 up to 15.2.6-tuxcare.2, plus listed versions 15.2.615.2.6-tuxcare.1 |
15.2.6-tuxcare.2 |
@angular/animationsTuxCare:npm From an advisory covering 10 CVEs |
15.2.9-tuxcare.0 up to 15.2.9-tuxcare.2, plus listed versions 15.2.915.2.9-tuxcare.1 |
15.2.9-tuxcare.2 |
@angular/animationsTuxCare:npm From an advisory covering 10 CVEs |
15.2.2-tuxcare.0 up to 15.2.2-tuxcare.2, plus listed versions 15.2.215.2.2-tuxcare.1 |
15.2.2-tuxcare.2 |
@angular/animationsTuxCare:npm From an advisory covering 15 CVEs |
16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions 16.2.11 |
16.2.11-tuxcare.1 |
@angular/animationsTuxCare:npm From an advisory covering 11 CVEs |
14.2.12-tuxcare.0 up to 14.2.12-tuxcare.2, plus listed versions 14.2.1214.2.12-tuxcare.1 |
14.2.12-tuxcare.2 |
@angular/animationsTuxCare:npm |
18.1.2-tuxcare.0 up to 18.1.2-tuxcare.3, plus listed versions 18.1.218.1.2-tuxcare.118.1.2-tuxcare.2 |
18.1.2-tuxcare.3 |
@angular/animationsTuxCare:npm From an advisory covering 2 CVEs |
5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions 5.1.25.1.2-tuxcare.15.1.2-tuxcare.2 |
5.1.2-tuxcare.3 |
@angular/animationsTuxCare:npm |
15.0.3-tuxcare.0 up to 15.0.3-tuxcare.3, plus listed versions 15.0.315.0.3-tuxcare.115.0.3-tuxcare.2 |
15.0.3-tuxcare.3 |
@angular/animationsTuxCare:npm |
18.2.12-tuxcare.0 up to 18.2.12-tuxcare.3, plus listed versions 18.2.1218.2.12-tuxcare.118.2.12-tuxcare.2 |
18.2.12-tuxcare.3 |
@angular/animationsTuxCare:npm |
13.3.12-tuxcare.0 up to 13.3.12-tuxcare.3, plus listed versions 13.3.1213.3.12-tuxcare.113.3.12-tuxcare.2 |
13.3.12-tuxcare.3 |
@angular/animationsTuxCare:npm |
17.1.0-tuxcare.0 up to 17.1.0-tuxcare.3, plus listed versions 17.1.017.1.0-tuxcare.117.1.0-tuxcare.2 |
17.1.0-tuxcare.3 |
@angular/animationsTuxCare:npm |
13.3.0-tuxcare.0 up to 13.3.0-tuxcare.3, plus listed versions 13.3.013.3.0-tuxcare.113.3.0-tuxcare.2 |
13.3.0-tuxcare.3 |
@angular/animationsTuxCare:npm From an advisory covering 2 CVEs |
13.3.11-tuxcare.0 up to 13.3.11-tuxcare.2, plus listed versions 13.3.1113.3.11-tuxcare.1 |
13.3.11-tuxcare.2 |
@angular/animationsTuxCare:npm |
14.2.8-tuxcare.0 up to 14.2.8-tuxcare.3, plus listed versions 14.2.814.2.8-tuxcare.114.2.8-tuxcare.2 |
14.2.8-tuxcare.3 |
@angular/routerTuxCare:npm |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/routerTuxCare:npm |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/routerTuxCare:npm |
8.2.14-tuxcare.0 up to 8.2.14-tuxcare.4, plus listed versions 8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.3 |
8.2.14-tuxcare.4 |
@angular/routerTuxCare:npm |
9.1.13-tuxcare.0 up to 9.1.13-tuxcare.2, plus listed versions 9.1.139.1.13-tuxcare.1 |
9.1.13-tuxcare.2 |
@angular/routerTuxCare:npm |
10.2.5-tuxcare.0 up to 10.2.5-tuxcare.2, plus listed versions 10.2.510.2.5-tuxcare.1 |
10.2.5-tuxcare.2 |
@angular/routerTuxCare:npm |
11.2.14-tuxcare.0 up to 11.2.14-tuxcare.2, plus listed versions 11.2.1411.2.14-tuxcare.1 |
11.2.14-tuxcare.2 |
@angular/routerTuxCare:npm |
12.2.17-tuxcare.0 up to 12.2.17-tuxcare.2, plus listed versions 12.2.1712.2.17-tuxcare.1 |
12.2.17-tuxcare.2 |
@angular/routerTuxCare:npm |
13.4.0-tuxcare.0 up to 13.4.0-tuxcare.2, plus listed versions 13.4.013.4.0-tuxcare.1 |
13.4.0-tuxcare.2 |
@angular/routerTuxCare:npm |
14.3.0-tuxcare.0 up to 14.3.0-tuxcare.4, plus listed versions 14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.3 |
14.3.0-tuxcare.4 |
@angular/routerTuxCare:npm |
15.2.10-tuxcare.0 up to 15.2.10-tuxcare.5, plus listed versions 15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.4 |
15.2.10-tuxcare.5 |
@angular/routerTuxCare:npm |
16.2.12-tuxcare.0 up to 16.2.12-tuxcare.5, plus listed versions 16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4 |
16.2.12-tuxcare.5 |
@angular/routerTuxCare:npm |
17.3.12-tuxcare.0 up to 17.3.12-tuxcare.5, plus listed versions 17.3.1217.3.12-tuxcare.117.3.12-tuxcare.217.3.12-tuxcare.317.3.12-tuxcare.4 |
17.3.12-tuxcare.5 |
@angular/routerTuxCare:npm |
18.2.14-tuxcare.0 up to 18.2.14-tuxcare.3, plus listed versions 18.2.1418.2.14-tuxcare.118.2.14-tuxcare.2 |
18.2.14-tuxcare.3 |
@angular/routerTuxCare:npm |
5.1.0-tuxcare.0 up to 5.1.0-tuxcare.1, plus listed versions 5.1.0 |
5.1.0-tuxcare.1 |
@angular/routerTuxCare:npm |
8.0.3-tuxcare.0 up to 8.0.3-tuxcare.3, plus listed versions 8.0.38.0.3-tuxcare.18.0.3-tuxcare.2 |
8.0.3-tuxcare.3 |
@angular/routerTuxCare:npm |
5.2.7-tuxcare.0 up to 5.2.7-tuxcare.2, plus listed versions 5.2.75.2.7-tuxcare.1 |
5.2.7-tuxcare.2 |
@angular/routerTuxCare:npm |
6.0.1-tuxcare.0 up to 6.0.1-tuxcare.3, plus listed versions 6.0.16.0.1-tuxcare.16.0.1-tuxcare.2 |
6.0.1-tuxcare.3 |
@angular/routerTuxCare:npm |
8.0.0-tuxcare.0 up to 8.0.0-tuxcare.2, plus listed versions 8.0.08.0.0-tuxcare.1 |
8.0.0-tuxcare.2 |
@angular/routerTuxCare:npm |
10.1.0-tuxcare.0 up to 10.1.0-tuxcare.2, plus listed versions 10.1.010.1.0-tuxcare.1 |
10.1.0-tuxcare.2 |
@angular/routerTuxCare:npm |
12.0.0-tuxcare.0 up to 12.0.0-tuxcare.2, plus listed versions 12.0.012.0.0-tuxcare.1 |
12.0.0-tuxcare.2 |
@angular/routerTuxCare:npm |
12.2.0-tuxcare.0 up to 12.2.0-tuxcare.2, plus listed versions 12.2.012.2.0-tuxcare.1 |
12.2.0-tuxcare.2 |
@angular/routerTuxCare:npm |
12.2.16-tuxcare.0 up to 12.2.16-tuxcare.2, plus listed versions 12.2.1612.2.16-tuxcare.1 |
12.2.16-tuxcare.2 |
@angular/routerTuxCare:npm |
7.2.1-tuxcare.0 up to 7.2.1-tuxcare.2, plus listed versions 7.2.17.2.1-tuxcare.1 |
7.2.1-tuxcare.2 |
@angular/routerTuxCare:npm |
11.2.0-tuxcare.0 up to 11.2.0-tuxcare.2, plus listed versions 11.2.011.2.0-tuxcare.1 |
11.2.0-tuxcare.2 |
@angular/routerTuxCare:npm |
11.2.11-tuxcare.0 up to 11.2.11-tuxcare.2, plus listed versions 11.2.1111.2.11-tuxcare.1 |
11.2.11-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 10 CVEs |
7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions 7.2.0 |
7.2.0-tuxcare.1 |
@angular/routerTuxCare:npm From an advisory covering 7 CVEs |
16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions 16.2.716.2.7-tuxcare.1 |
16.2.7-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 8 CVEs |
15.2.1-tuxcare.0 up to 15.2.1-tuxcare.2, plus listed versions 15.2.115.2.1-tuxcare.1 |
15.2.1-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 7 CVEs |
15.2.6-tuxcare.0 up to 15.2.6-tuxcare.2, plus listed versions 15.2.615.2.6-tuxcare.1 |
15.2.6-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 8 CVEs |
15.2.9-tuxcare.0 up to 15.2.9-tuxcare.2, plus listed versions 15.2.915.2.9-tuxcare.1 |
15.2.9-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 8 CVEs |
15.2.2-tuxcare.0 up to 15.2.2-tuxcare.2, plus listed versions 15.2.215.2.2-tuxcare.1 |
15.2.2-tuxcare.2 |
@angular/routerTuxCare:npm From an advisory covering 10 CVEs |
16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions 16.2.11 |
16.2.11-tuxcare.1 |
@angular/routerTuxCare:npm From an advisory covering 9 CVEs |
14.2.12-tuxcare.0 up to 14.2.12-tuxcare.2, plus listed versions 14.2.1214.2.12-tuxcare.1 |
14.2.12-tuxcare.2 |
@angular/routerTuxCare:npm |
18.1.2-tuxcare.0 up to 18.1.2-tuxcare.3, plus listed versions 18.1.218.1.2-tuxcare.118.1.2-tuxcare.2 |
18.1.2-tuxcare.3 |
@angular/routerTuxCare:npm |
15.0.3-tuxcare.0 up to 15.0.3-tuxcare.3, plus listed versions 15.0.315.0.3-tuxcare.115.0.3-tuxcare.2 |
15.0.3-tuxcare.3 |
@angular/routerTuxCare:npm |
18.2.12-tuxcare.0 up to 18.2.12-tuxcare.3, plus listed versions 18.2.1218.2.12-tuxcare.118.2.12-tuxcare.2 |
18.2.12-tuxcare.3 |
@angular/routerTuxCare:npm |
13.3.12-tuxcare.0 up to 13.3.12-tuxcare.3, plus listed versions 13.3.1213.3.12-tuxcare.113.3.12-tuxcare.2 |
13.3.12-tuxcare.3 |
@angular/routerTuxCare:npm |
17.1.0-tuxcare.0 up to 17.1.0-tuxcare.3, plus listed versions 17.1.017.1.0-tuxcare.117.1.0-tuxcare.2 |
17.1.0-tuxcare.3 |
@angular/routerTuxCare:npm |
13.3.0-tuxcare.0 up to 13.3.0-tuxcare.3, plus listed versions 13.3.013.3.0-tuxcare.113.3.0-tuxcare.2 |
13.3.0-tuxcare.3 |
@angular/routerTuxCare:npm |
13.3.11-tuxcare.0 up to 13.3.11-tuxcare.2, plus listed versions 13.3.1113.3.11-tuxcare.1 |
13.3.11-tuxcare.2 |
@angular/upgradeTuxCare:npm From an advisory covering 2 CVEs |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/upgradeTuxCare:npm From an advisory covering 2 CVEs |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/upgradeTuxCare:npm |
8.2.14-tuxcare.0 up to 8.2.14-tuxcare.4, plus listed versions 8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.3 |
8.2.14-tuxcare.4 |
@angular/upgradeTuxCare:npm |
18.2.14-tuxcare.0 up to 18.2.14-tuxcare.3, plus listed versions 18.2.1418.2.14-tuxcare.118.2.14-tuxcare.2 |
18.2.14-tuxcare.3 |
@angular/upgradeTuxCare:npm |
4.3.5-tuxcare.0 up to 4.3.5-tuxcare.2, plus listed versions 4.3.54.3.5-tuxcare.1 |
4.3.5-tuxcare.2 |
@angular/upgradeTuxCare:npm |
8.0.3-tuxcare.0 up to 8.0.3-tuxcare.3, plus listed versions 8.0.38.0.3-tuxcare.18.0.3-tuxcare.2 |
8.0.3-tuxcare.3 |
@angular/upgradeTuxCare:npm |
8.0.0-tuxcare.0 up to 8.0.0-tuxcare.2, plus listed versions 8.0.08.0.0-tuxcare.1 |
8.0.0-tuxcare.2 |
@angular/upgradeTuxCare:npm |
10.1.0-tuxcare.0 up to 10.1.0-tuxcare.2, plus listed versions 10.1.010.1.0-tuxcare.1 |
10.1.0-tuxcare.2 |
@angular/upgradeTuxCare:npm |
12.2.0-tuxcare.0 up to 12.2.0-tuxcare.2, plus listed versions 12.2.012.2.0-tuxcare.1 |
12.2.0-tuxcare.2 |
@angular/upgradeTuxCare:npm |
11.2.0-tuxcare.0 up to 11.2.0-tuxcare.2, plus listed versions 11.2.011.2.0-tuxcare.1 |
11.2.0-tuxcare.2 |
@angular/upgradeTuxCare:npm |
18.2.12-tuxcare.0 up to 18.2.12-tuxcare.3, plus listed versions 18.2.1218.2.12-tuxcare.118.2.12-tuxcare.2 |
18.2.12-tuxcare.3 |
@angular/upgradeTuxCare:npm |
13.3.0-tuxcare.0 up to 13.3.0-tuxcare.3, plus listed versions 13.3.013.3.0-tuxcare.113.3.0-tuxcare.2 |
13.3.0-tuxcare.3 |
@angular/upgradeTuxCare:npm |
14.2.8-tuxcare.0 up to 14.2.8-tuxcare.3, plus listed versions 14.2.814.2.8-tuxcare.114.2.8-tuxcare.2 |
14.2.8-tuxcare.3 |
@angular/upgradeTuxCare:npm From an advisory covering 2 CVEs |
6.1.10-tuxcare.0 up to 6.1.10-tuxcare.4, plus listed versions 6.1.106.1.10-tuxcare.16.1.10-tuxcare.3 |
6.1.10-tuxcare.4 |
@angular/upgradeTuxCare:npm |
9.1.13-tuxcare.0 up to 9.1.13-tuxcare.2, plus listed versions 9.1.139.1.13-tuxcare.1 |
9.1.13-tuxcare.2 |
@angular/upgradeTuxCare:npm |
13.4.0-tuxcare.0 up to 13.4.0-tuxcare.2, plus listed versions 13.4.013.4.0-tuxcare.1 |
13.4.0-tuxcare.2 |
@angular/upgradeTuxCare:npm |
6.0.1-tuxcare.0 up to 6.0.1-tuxcare.3, plus listed versions 6.0.16.0.1-tuxcare.16.0.1-tuxcare.2 |
6.0.1-tuxcare.3 |
@angular/upgradeTuxCare:npm |
18.1.2-tuxcare.0 up to 18.1.2-tuxcare.3, plus listed versions 18.1.218.1.2-tuxcare.118.1.2-tuxcare.2 |
18.1.2-tuxcare.3 |
@angular/upgradeTuxCare:npm |
17.1.0-tuxcare.0 up to 17.1.0-tuxcare.3, plus listed versions 17.1.017.1.0-tuxcare.117.1.0-tuxcare.2 |
17.1.0-tuxcare.3 |
@angular/upgradeTuxCare:npm |
10.2.5-tuxcare.0 up to 10.2.5-tuxcare.2, plus listed versions 10.2.510.2.5-tuxcare.1 |
10.2.5-tuxcare.2 |
@angular/upgradeTuxCare:npm |
11.2.14-tuxcare.0 up to 11.2.14-tuxcare.2, plus listed versions 11.2.1411.2.14-tuxcare.1 |
11.2.14-tuxcare.2 |
@angular/upgradeTuxCare:npm |
12.2.17-tuxcare.0 up to 12.2.17-tuxcare.2, plus listed versions 12.2.1712.2.17-tuxcare.1 |
12.2.17-tuxcare.2 |
@angular/upgradeTuxCare:npm |
15.2.10-tuxcare.0 up to 15.2.10-tuxcare.5, plus listed versions 15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.4 |
15.2.10-tuxcare.5 |
@angular/upgradeTuxCare:npm |
5.2.7-tuxcare.0 up to 5.2.7-tuxcare.2, plus listed versions 5.2.75.2.7-tuxcare.1 |
5.2.7-tuxcare.2 |
@angular/upgradeTuxCare:npm |
12.0.0-tuxcare.0 up to 12.0.0-tuxcare.2, plus listed versions 12.0.012.0.0-tuxcare.1 |
12.0.0-tuxcare.2 |
@angular/upgradeTuxCare:npm |
11.2.11-tuxcare.0 up to 11.2.11-tuxcare.2, plus listed versions 11.2.1111.2.11-tuxcare.1 |
11.2.11-tuxcare.2 |
@angular/upgradeTuxCare:npm |
14.3.0-tuxcare.0 up to 14.3.0-tuxcare.4, plus listed versions 14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.3 |
14.3.0-tuxcare.4 |
@angular/upgradeTuxCare:npm |
13.3.12-tuxcare.0 up to 13.3.12-tuxcare.3, plus listed versions 13.3.1213.3.12-tuxcare.113.3.12-tuxcare.2 |
13.3.12-tuxcare.3 |
@angular/upgradeTuxCare:npm From an advisory covering 2 CVEs |
17.3.12-tuxcare.0 up to 17.3.12-tuxcare.5, plus listed versions 17.3.1217.3.12-tuxcare.117.3.12-tuxcare.217.3.12-tuxcare.317.3.12-tuxcare.4 |
17.3.12-tuxcare.5 |
@angular/upgradeTuxCare:npm |
16.2.12-tuxcare.0 up to 16.2.12-tuxcare.5, plus listed versions 16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4 |
16.2.12-tuxcare.5 |
@angular/upgradeTuxCare:npm |
5.1.0-tuxcare.0 up to 5.1.0-tuxcare.1, plus listed versions 5.1.0 |
5.1.0-tuxcare.1 |
@angular/upgradeTuxCare:npm |
15.0.3-tuxcare.0 up to 15.0.3-tuxcare.3, plus listed versions 15.0.315.0.3-tuxcare.115.0.3-tuxcare.2 |
15.0.3-tuxcare.3 |
@angular/upgradeTuxCare:npm From an advisory covering 2 CVEs |
13.3.11-tuxcare.0 up to 13.3.11-tuxcare.2, plus listed versions 13.3.1113.3.11-tuxcare.1 |
13.3.11-tuxcare.2 |
@angular/upgradeTuxCare:npm |
12.2.16-tuxcare.0 up to 12.2.16-tuxcare.2, plus listed versions 12.2.1612.2.16-tuxcare.1 |
12.2.16-tuxcare.2 |
@angular/upgradeTuxCare:npm |
7.2.1-tuxcare.0 up to 7.2.1-tuxcare.2, plus listed versions 7.2.17.2.1-tuxcare.1 |
7.2.1-tuxcare.2 |
@angular/compilerTuxCare:npm From an advisory covering 2 CVEs |
7.2.16-tuxcare.0 up to 7.2.16-tuxcare.4, plus listed versions 7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.3 |
7.2.16-tuxcare.4 |
@angular/compilerTuxCare:npm From an advisory covering 2 CVEs |
5.2.11-tuxcare.0 up to 5.2.11-tuxcare.4, plus listed versions 5.2.115.2.11-tuxcare.15.2.11-tuxcare.3 |
5.2.11-tuxcare.4 |
@angular/compilerTuxCare:npm |
10.2.5-tuxcare.0 up to 10.2.5-tuxcare.2, plus listed versions 10.2.510.2.5-tuxcare.1 |
10.2.5-tuxcare.2 |
@angular/compilerTuxCare:npm |
15.2.10-tuxcare.0 up to 15.2.10-tuxcare.5, plus listed versions 15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.4 |
15.2.10-tuxcare.5 |
@angular/compilerTuxCare:npm |
5.1.0-tuxcare.0 up to 5.1.0-tuxcare.1, plus listed versions 5.1.0 |
5.1.0-tuxcare.1 |
@angular/compilerTuxCare:npm |
6.0.1-tuxcare.0 up to 6.0.1-tuxcare.3, plus listed versions 6.0.16.0.1-tuxcare.16.0.1-tuxcare.2 |
6.0.1-tuxcare.3 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:2.0.41-8.SP9_redhat_00001.1.el7eap | 0:2.0.41-8.SP9_redhat_00001.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
angular.jsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.2.28-1ubuntu21.2.28-1ubuntu2+esm1 |
None known |
angular.jsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.5.10-11.5.10-1ubuntu0.1~esm1 |
None known |
angular.jsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.5.10-11.7.9-11.7.9-1ubuntu0.1~esm1 |
None known |
angular.jsUbuntu:22.04:LTS |
All versions, plus listed versions 1.8.2-21.8.2-2ubuntu0.1 |
None known |
angular.jsUbuntu:24.04:LTS |
All versions, plus listed versions 1.8.3-11.8.3-1ubuntu0.24.04.1 |
None known |
angular.jsUbuntu:25.10 |
All versions, plus listed versions 1.8.3-11.8.3-3 |
None known |
angular.jsUbuntu:26.10 |
All versions, plus listed versions 1.8.3-3 |
None known |
angular.jsUbuntu:26.04:LTS |
All versions, plus listed versions 1.8.3-3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-66412 is a high vulnerability (CVSS 8.5) in Angular, published December 1, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in @angular/compiler 21.0.2.
References
github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49
cert-portal.siemens.com/productcert/html/ssa-485750.html
nvd.nist.gov/vuln/detail/CVE-2025-66412
Show 69 moreShow less
security-tracker.debian.org/tracker/CVE-2025-66412
access.redhat.com/errata/RHSA-2026:33371
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3
bugzilla.redhat.com/show_bug.cgi?id=2339095
issues.redhat.com/browse/JBEAP-31703
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33371.json
cve.org/CVERecord?id=CVE-2024-29371
bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack
kb.cert.org/vuls/id/767506
lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122
gruppotim.it/it/footer/red-team.html
ubuntu.com/security/CVE-2025-66412
Also not on the record: 492 aliases and 422 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 542 source records.