Every CVE Search/ Get API key

CVE-2026-46417

Angular: SSRF via Hostname Hijacking in @angular/platform-server

8.8 HighFix available

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
None

Exploit likelihood

0.36%Up 0.3 points since Jun 12, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.8

Angular: SSRF via Hostname Hijacking in @angular/platform-server

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Record
CVE-2026-46417
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N
Weakness
CWE-918
Updated
2026-11-02
EUVDEUVD-2026-38294 8.8

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Record
EUVD-2026-38294
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-rfh7-fxqc-q52v 8.8

@angular/platform-server: SSRF via Hostname Hijacking

Impact

A Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points.

When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname.

Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services.

Fix Information

The vulnerability is mitigated by introducing an Allowlist Mechanism directly into the core rendering APIs. The renderModule and renderApplication functions now include an allowedHosts configuration option. The rendering engine validates the hostname extracted from the request URL against this list before proceeding. If the hostname does not match an allowed entry, the engine prevents the hostname hijacking, ensuring that HttpClient requests remain restricted to trusted domains.

Patches

  • 22.0.0-next.12
  • 21.2.13
  • 20.3.21
  • 19.2.22

Workarounds

Developers unable to update immediately should implement strict URL validation in their server entry point (e.g., server.ts). Ensure that req.url is validated against a known list of trusted hostnames or normalized to a relative path before being passed torenderApplication or renderModule.

// Example manual normalization in Express
app.get('*', (req, res, next) => {
  const trustedHost = 'localhost:4000';
  // Ensure the request target matches expectations
  if (req.headers.host !== trustedHost) {
     return res.status(403).send('Forbidden');
  }
  next();
});
Record
GHSA-rfh7-fxqc-q52v
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-918
Updated
2026-11-02
NVD 8.8

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Record
CVE-2026-46417
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-918
Updated
2026-11-02
OSV 8.8

Angular: SSRF via Hostname Hijacking in @angular/platform-server

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Record
CVE-2026-46417
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N
Weakness
CWE-918
Updated
2026-11-02
OSVDEBIAN-CVE-2026-46417 6.1

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Record
DEBIAN-CVE-2026-46417
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 48 moreShow less
OSVGHSA-rfh7-fxqc-q52v 8.8

@angular/platform-server: SSRF via Hostname Hijacking

Impact

A Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points.

When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname.

Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services.

Fix Information

The vulnerability is mitigated by introducing an Allowlist Mechanism directly into the core rendering APIs. The renderModule and renderApplication functions now include an allowedHosts configuration option. The rendering engine validates the hostname extracted from the request URL against this list before proceeding. If the hostname does not match an allowed entry, the engine prevents the hostname hijacking, ensuring that HttpClient requests remain restricted to trusted domains.

Patches

  • 22.0.0-next.12
  • 21.2.13
  • 20.3.21
  • 19.2.22

Workarounds

Developers unable to update immediately should implement strict URL validation in their server entry point (e.g., server.ts). Ensure that req.url is validated against a known list of trusted hostnames or normalized to a relative path before being passed torenderApplication or renderModule.

// Example manual normalization in Express
app.get('*', (req, res, next) => {
  const trustedHost = 'localhost:4000';
  // Ensure the request target matches expectations
  if (req.headers.host !== trustedHost) {
     return res.status(403).send('Forbidden');
  }
  next();
});
Record
GHSA-rfh7-fxqc-q52v
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-918
Updated
2026-11-02
OSVUBUNTU-CVE-2026-46417 8.8

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

Record
UBUNTU-CVE-2026-46417
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVCLSA-2026-1781052756 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 11.2.14-tuxcare.6.

Record
CLSA-2026-1781052756
Updated
2026-11-02
OSVCLSA-2026-1781139159 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 5 @angular packages to address 1 CVE. Fixed in 10.2.5-tuxcare.7.

Record
CLSA-2026-1781139159
Updated
2026-11-02
OSVCLSA-2026-1781139160 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 9.1.13-tuxcare.9.

Record
CLSA-2026-1781139160
Updated
2026-11-02
OSVCLSA-2026-1781139161 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 8.2.14-tuxcare.8.

Record
CLSA-2026-1781139161
Updated
2026-11-02
OSVCLSA-2026-1781139164 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 7.2.16-tuxcare.8.

Record
CLSA-2026-1781139164
Updated
2026-11-02
OSVCLSA-2026-1781139193 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 12.2.17-tuxcare.6.

Record
CLSA-2026-1781139193
Updated
2026-11-02
OSVCLSA-2026-1781139195 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 13.4.0-tuxcare.6.

Record
CLSA-2026-1781139195
Updated
2026-11-02
OSVCLSA-2026-1781139200 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 17.3.12-tuxcare.12.

Record
CLSA-2026-1781139200
Updated
2026-11-02
OSVCLSA-2026-1781139204 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.14-tuxcare.10.

Record
CLSA-2026-1781139204
Updated
2026-11-02
OSVCLSA-2026-1781139206 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 14.3.0-tuxcare.8.

Record
CLSA-2026-1781139206
Updated
2026-11-02
OSVCLSA-2026-1781139207 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 15.2.10-tuxcare.8.

Record
CLSA-2026-1781139207
Updated
2026-11-02
OSVCLSA-2026-1781139208 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 16.2.12-tuxcare.10.

Record
CLSA-2026-1781139208
Updated
2026-11-02
OSVCLSA-2026-1781657702 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 6.1.10-tuxcare.8.

Record
CLSA-2026-1781657702
Updated
2026-11-02
OSVCLSA-2026-1782435548 No score

TuxCare security update for @angular (7 CVEs)

TuxCare rebuilt 6 @angular packages to address 7 CVEs. Fixed in 5.2.11-tuxcare.8.

Record
CLSA-2026-1782435548
Updated
2026-11-02
OSVCLSA-2026-1782521952 No score

TuxCare security update for @angular (7 CVEs)

TuxCare rebuilt 5 @angular packages to address 7 CVEs. Fixed in 4.4.7-tuxcare.8.

Record
CLSA-2026-1782521952
Updated
2026-11-02
OSVCLSA-2026-1782954037 No score

TuxCare security update for @angular (15 CVEs)

TuxCare rebuilt 3 @angular packages to address 15 CVEs. Fixed in 18.1.2-tuxcare.2.

Record
CLSA-2026-1782954037
Updated
2026-11-02
OSVCLSA-2026-1782954038 No score

TuxCare security update for @angular (15 CVEs)

TuxCare rebuilt 3 @angular packages to address 15 CVEs. Fixed in 18.2.12-tuxcare.2.

Record
CLSA-2026-1782954038
Updated
2026-11-02
OSVCLSA-2026-1782954040 No score

TuxCare security update for @angular (8 CVEs)

TuxCare rebuilt 6 @angular packages to address 8 CVEs. Fixed in 7.2.0-tuxcare.1.

Record
CLSA-2026-1782954040
Updated
2026-11-02
OSVCLSA-2026-1782954041 No score

TuxCare security update for @angular (6 CVEs)

TuxCare rebuilt 6 @angular packages to address 6 CVEs. Fixed in 7.2.1-tuxcare.3.

Record
CLSA-2026-1782954041
Updated
2026-11-02
OSVCLSA-2026-1782954042 No score

TuxCare security update for @angular (6 CVEs)

TuxCare rebuilt 6 @angular packages to address 6 CVEs. Fixed in 7.2.11-tuxcare.3.

Record
CLSA-2026-1782954042
Updated
2026-11-02
OSVCLSA-2026-1783040443 No score

TuxCare security update for @angular (16 CVEs)

TuxCare rebuilt 3 @angular packages to address 16 CVEs. Fixed in 16.2.7-tuxcare.2.

Record
CLSA-2026-1783040443
Updated
2026-11-02
OSVCLSA-2026-1783040444 No score

TuxCare security update for @angular (12 CVEs)

TuxCare rebuilt 3 @angular packages to address 12 CVEs. Fixed in 15.2.1-tuxcare.2.

Record
CLSA-2026-1783040444
Updated
2026-11-02
OSVCLSA-2026-1783040445 No score

TuxCare security update for @angular (11 CVEs)

TuxCare rebuilt 3 @angular packages to address 11 CVEs. Fixed in 15.2.6-tuxcare.2.

Record
CLSA-2026-1783040445
Updated
2026-11-02
OSVCLSA-2026-1783040446 No score

TuxCare security update for @angular (10 CVEs)

TuxCare rebuilt 3 @angular packages to address 10 CVEs. Fixed in 15.2.9-tuxcare.2.

Record
CLSA-2026-1783040446
Updated
2026-11-02
OSVCLSA-2026-1783040447 No score

TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 6 @angular packages to address 4 CVEs. Fixed in 8.0.3-tuxcare.5.

Record
CLSA-2026-1783040447
Updated
2026-11-02
OSVCLSA-2026-1783040448 No score

TuxCare security update for @angular (6 CVEs)

TuxCare rebuilt 6 @angular packages to address 6 CVEs. Fixed in 8.0.0-tuxcare.3.

Record
CLSA-2026-1783040448
Updated
2026-11-02
OSVCLSA-2026-1783040449 No score

TuxCare security update for @angular (11 CVEs)

TuxCare rebuilt 3 @angular packages to address 11 CVEs. Fixed in 12.0.0-tuxcare.3.

Record
CLSA-2026-1783040449
Updated
2026-11-02
OSVCLSA-2026-1783040450 No score

TuxCare security update for @angular (12 CVEs)

TuxCare rebuilt 3 @angular packages to address 12 CVEs. Fixed in 12.2.16-tuxcare.3.

Record
CLSA-2026-1783040450
Updated
2026-11-02
OSVCLSA-2026-1783040451 No score

TuxCare security update for @angular (12 CVEs)

TuxCare rebuilt 3 @angular packages to address 12 CVEs. Fixed in 15.2.2-tuxcare.2.

Record
CLSA-2026-1783040451
Updated
2026-11-02
OSVCLSA-2026-1783040452 No score

TuxCare security update for @angular (11 CVEs)

TuxCare rebuilt 3 @angular packages to address 11 CVEs. Fixed in 12.2.0-tuxcare.3.

Record
CLSA-2026-1783040452
Updated
2026-11-02
OSVCLSA-2026-1783040453 No score

TuxCare security update for @angular (15 CVEs)

TuxCare rebuilt 3 @angular packages to address 15 CVEs. Fixed in 13.3.11-tuxcare.1.

Record
CLSA-2026-1783040453
Updated
2026-11-02
OSVCLSA-2026-1783040454 No score

TuxCare security update for @angular (11 CVEs)

TuxCare rebuilt 3 @angular packages to address 11 CVEs. Fixed in 13.3.0-tuxcare.2.

Record
CLSA-2026-1783040454
Updated
2026-11-02
OSVCLSA-2026-1783040455 No score

TuxCare security update for @angular (12 CVEs)

TuxCare rebuilt 3 @angular packages to address 12 CVEs. Fixed in 13.3.12-tuxcare.2.

Record
CLSA-2026-1783040455
Updated
2026-11-02
OSVCLSA-2026-1783040457 No score

TuxCare security update for @angular (13 CVEs)

TuxCare rebuilt 3 @angular packages to address 13 CVEs. Fixed in 15.0.3-tuxcare.2.

Record
CLSA-2026-1783040457
Updated
2026-11-02
OSVCLSA-2026-1783040458 No score

TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 5 @angular packages to address 4 CVEs. Fixed in 10.1.0-tuxcare.3.

Record
CLSA-2026-1783040458
Updated
2026-11-02
OSVCLSA-2026-1783040463 No score

TuxCare security update for @angular (20 CVEs)

TuxCare rebuilt 3 @angular packages to address 20 CVEs. Fixed in 16.2.11-tuxcare.1.

Record
CLSA-2026-1783040463
Updated
2026-11-02
OSVCLSA-2026-1783040467 No score

TuxCare security update for @angular (10 CVEs)

TuxCare rebuilt 3 @angular packages to address 10 CVEs. Fixed in 14.2.8-tuxcare.2.

Record
CLSA-2026-1783040467
Updated
2026-11-02
OSVCLSA-2026-1783040470 No score

TuxCare security update for @angular (13 CVEs)

TuxCare rebuilt 3 @angular packages to address 13 CVEs. Fixed in 14.2.12-tuxcare.2.

Record
CLSA-2026-1783040470
Updated
2026-11-02
OSVCLSA-2026-1783126871 No score

TuxCare security update for @angular (11 CVEs)

TuxCare rebuilt 3 @angular packages to address 11 CVEs. Fixed in 11.2.11-tuxcare.3.

Record
CLSA-2026-1783126871
Updated
2026-11-02
OSVCLSA-2026-1783126872 No score

TuxCare security update for @angular (5 CVEs)

TuxCare rebuilt 6 @angular packages to address 5 CVEs. Fixed in 6.0.1-tuxcare.4.

Record
CLSA-2026-1783126872
Updated
2026-11-02
OSVCLSA-2026-1783126873 No score

TuxCare security update for @angular (11 CVEs)

TuxCare rebuilt 3 @angular packages to address 11 CVEs. Fixed in 11.2.0-tuxcare.3.

Record
CLSA-2026-1783126873
Updated
2026-11-02
OSVCLSA-2026-1783126874 No score

TuxCare security update for @angular (17 CVEs)

TuxCare rebuilt 3 @angular packages to address 17 CVEs. Fixed in 17.1.0-tuxcare.2.

Record
CLSA-2026-1783126874
Updated
2026-11-02
OSVCLSA-2026-1783126876 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 5.1.0-tuxcare.3.

Record
CLSA-2026-1783126876
Updated
2026-11-02
OSVCLSA-2026-1783126878 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 5.1.2-tuxcare.3.

Record
CLSA-2026-1783126878
Updated
2026-11-02
OSVCLSA-2026-1783126879 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 5.2.7-tuxcare.4.

Record
CLSA-2026-1783126879
Updated
2026-11-02
OSVCLSA-2026-1783213294 No score

TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 5 @angular packages to address 1 CVE. Fixed in 4.3.5-tuxcare.4.

Record
CLSA-2026-1783213294
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
@angular/platform-server
npm
 22.0.0-next.0 up to 22.0.0-next.12
22.0.0-next.12
@angular/platform-server
npm
 21.0.0-next.0 up to 21.2.13
21.2.13
@angular/platform-server
npm
 20.0.0-next.0 up to 20.3.21
20.3.21
@angular/platform-server
npm
 19.0.0-next.0 up to 19.2.22
19.2.22
@angular/platform-server
npm
 through 18.2.14 None known
@angular/bazel
TuxCare:npm
 11.2.14-tuxcare.0 up to 11.2.14-tuxcare.6, plus listed versions
11.2.1411.2.14-tuxcare.111.2.14-tuxcare.211.2.14-tuxcare.311.2.14-tuxcare.411.2.14-tuxcare.5
11.2.14-tuxcare.6
@angular/benchpress
TuxCare:npm
 11.2.14-tuxcare.0 up to 11.2.14-tuxcare.6, plus listed versions
11.2.1411.2.14-tuxcare.111.2.14-tuxcare.211.2.14-tuxcare.311.2.14-tuxcare.411.2.14-tuxcare.5
11.2.14-tuxcare.6
@angular/language-service
TuxCare:npm
 11.2.14-tuxcare.0 up to 11.2.14-tuxcare.6, plus listed versions
11.2.1411.2.14-tuxcare.111.2.14-tuxcare.211.2.14-tuxcare.311.2.14-tuxcare.411.2.14-tuxcare.5
11.2.14-tuxcare.6
@angular/bazel
TuxCare:npm
 10.2.5-tuxcare.0 up to 10.2.5-tuxcare.7, plus listed versions
10.2.510.2.5-tuxcare.110.2.5-tuxcare.210.2.5-tuxcare.310.2.5-tuxcare.410.2.5-tuxcare.510.2.5-tuxcare.6
10.2.5-tuxcare.7
@angular/benchpress
TuxCare:npm
 10.2.5-tuxcare.0 up to 10.2.5-tuxcare.7, plus listed versions
10.2.510.2.5-tuxcare.110.2.5-tuxcare.210.2.5-tuxcare.310.2.5-tuxcare.410.2.5-tuxcare.510.2.5-tuxcare.6
10.2.5-tuxcare.7
Show 205 moreShow less
Affected packages
PackageAffectedFixed
@angular/language-service
TuxCare:npm
 10.2.5-tuxcare.0 up to 10.2.5-tuxcare.7, plus listed versions
10.2.510.2.5-tuxcare.110.2.5-tuxcare.210.2.5-tuxcare.310.2.5-tuxcare.410.2.5-tuxcare.510.2.5-tuxcare.6
10.2.5-tuxcare.7
@angular/platform-webworker
TuxCare:npm
 10.2.5-tuxcare.0 up to 10.2.5-tuxcare.7, plus listed versions
10.2.510.2.5-tuxcare.110.2.5-tuxcare.210.2.5-tuxcare.310.2.5-tuxcare.410.2.5-tuxcare.510.2.5-tuxcare.6
10.2.5-tuxcare.7
@angular/platform-webworker-dynamic
TuxCare:npm
 10.2.5-tuxcare.0 up to 10.2.5-tuxcare.7, plus listed versions
10.2.510.2.5-tuxcare.110.2.5-tuxcare.210.2.5-tuxcare.310.2.5-tuxcare.410.2.5-tuxcare.510.2.5-tuxcare.6
10.2.5-tuxcare.7
@angular/bazel
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/benchpress
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/http
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/language-service
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/platform-webworker
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/platform-webworker-dynamic
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/bazel
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/benchpress
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/http
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/language-service
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/platform-webworker
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/platform-webworker-dynamic
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/bazel
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/benchpress
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/http
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/language-service
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/platform-webworker
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/platform-webworker-dynamic
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/bazel
TuxCare:npm
 12.2.17-tuxcare.0 up to 12.2.17-tuxcare.6, plus listed versions
12.2.1712.2.17-tuxcare.112.2.17-tuxcare.212.2.17-tuxcare.312.2.17-tuxcare.412.2.17-tuxcare.5
12.2.17-tuxcare.6
@angular/benchpress
TuxCare:npm
 12.2.17-tuxcare.0 up to 12.2.17-tuxcare.6, plus listed versions
12.2.1712.2.17-tuxcare.112.2.17-tuxcare.212.2.17-tuxcare.312.2.17-tuxcare.412.2.17-tuxcare.5
12.2.17-tuxcare.6
@angular/language-service
TuxCare:npm
 12.2.17-tuxcare.0 up to 12.2.17-tuxcare.6, plus listed versions
12.2.1712.2.17-tuxcare.112.2.17-tuxcare.212.2.17-tuxcare.312.2.17-tuxcare.412.2.17-tuxcare.5
12.2.17-tuxcare.6
@angular/bazel
TuxCare:npm
 13.4.0-tuxcare.0 up to 13.4.0-tuxcare.6, plus listed versions
13.4.013.4.0-tuxcare.113.4.0-tuxcare.213.4.0-tuxcare.313.4.0-tuxcare.413.4.0-tuxcare.5
13.4.0-tuxcare.6
@angular/benchpress
TuxCare:npm
 13.4.0-tuxcare.0 up to 13.4.0-tuxcare.6, plus listed versions
13.4.013.4.0-tuxcare.113.4.0-tuxcare.213.4.0-tuxcare.313.4.0-tuxcare.413.4.0-tuxcare.5
13.4.0-tuxcare.6
@angular/language-service
TuxCare:npm
 13.4.0-tuxcare.0 up to 13.4.0-tuxcare.6, plus listed versions
13.4.013.4.0-tuxcare.113.4.0-tuxcare.213.4.0-tuxcare.313.4.0-tuxcare.413.4.0-tuxcare.5
13.4.0-tuxcare.6
@angular/bazel
TuxCare:npm
 17.3.12-tuxcare.0 up to 17.3.12-tuxcare.12, plus listed versions
17.3.1217.3.12-tuxcare.117.3.12-tuxcare.1017.3.12-tuxcare.1117.3.12-tuxcare.2
Show 7 moreShow less
17.3.12-tuxcare.317.3.12-tuxcare.417.3.12-tuxcare.517.3.12-tuxcare.617.3.12-tuxcare.717.3.12-tuxcare.817.3.12-tuxcare.9
17.3.12-tuxcare.12
@angular/benchpress
TuxCare:npm
 17.3.12-tuxcare.0 up to 17.3.12-tuxcare.12, plus listed versions
17.3.1217.3.12-tuxcare.117.3.12-tuxcare.1017.3.12-tuxcare.1117.3.12-tuxcare.2
Show 7 moreShow less
17.3.12-tuxcare.317.3.12-tuxcare.417.3.12-tuxcare.517.3.12-tuxcare.617.3.12-tuxcare.717.3.12-tuxcare.817.3.12-tuxcare.9
17.3.12-tuxcare.12
@angular/language-service
TuxCare:npm
 17.3.12-tuxcare.0 up to 17.3.12-tuxcare.12, plus listed versions
17.3.1217.3.12-tuxcare.117.3.12-tuxcare.1017.3.12-tuxcare.1117.3.12-tuxcare.2
Show 7 moreShow less
17.3.12-tuxcare.317.3.12-tuxcare.417.3.12-tuxcare.517.3.12-tuxcare.617.3.12-tuxcare.717.3.12-tuxcare.817.3.12-tuxcare.9
17.3.12-tuxcare.12
@angular/bazel
TuxCare:npm
 18.2.14-tuxcare.0 up to 18.2.14-tuxcare.10, plus listed versions
18.2.1418.2.14-tuxcare.118.2.14-tuxcare.218.2.14-tuxcare.318.2.14-tuxcare.4
Show 5 moreShow less
18.2.14-tuxcare.518.2.14-tuxcare.618.2.14-tuxcare.718.2.14-tuxcare.818.2.14-tuxcare.9
18.2.14-tuxcare.10
@angular/benchpress
TuxCare:npm
 18.2.14-tuxcare.0 up to 18.2.14-tuxcare.10, plus listed versions
18.2.1418.2.14-tuxcare.118.2.14-tuxcare.218.2.14-tuxcare.318.2.14-tuxcare.4
Show 5 moreShow less
18.2.14-tuxcare.518.2.14-tuxcare.618.2.14-tuxcare.718.2.14-tuxcare.818.2.14-tuxcare.9
18.2.14-tuxcare.10
@angular/language-service
TuxCare:npm
 18.2.14-tuxcare.0 up to 18.2.14-tuxcare.10, plus listed versions
18.2.1418.2.14-tuxcare.118.2.14-tuxcare.218.2.14-tuxcare.318.2.14-tuxcare.4
Show 5 moreShow less
18.2.14-tuxcare.518.2.14-tuxcare.618.2.14-tuxcare.718.2.14-tuxcare.818.2.14-tuxcare.9
18.2.14-tuxcare.10
@angular/bazel
TuxCare:npm
 14.3.0-tuxcare.0 up to 14.3.0-tuxcare.8, plus listed versions
14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.314.3.0-tuxcare.414.3.0-tuxcare.514.3.0-tuxcare.614.3.0-tuxcare.7
14.3.0-tuxcare.8
@angular/benchpress
TuxCare:npm
 14.3.0-tuxcare.0 up to 14.3.0-tuxcare.8, plus listed versions
14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.314.3.0-tuxcare.414.3.0-tuxcare.514.3.0-tuxcare.614.3.0-tuxcare.7
14.3.0-tuxcare.8
@angular/language-service
TuxCare:npm
 14.3.0-tuxcare.0 up to 14.3.0-tuxcare.8, plus listed versions
14.3.014.3.0-tuxcare.114.3.0-tuxcare.214.3.0-tuxcare.314.3.0-tuxcare.414.3.0-tuxcare.514.3.0-tuxcare.614.3.0-tuxcare.7
14.3.0-tuxcare.8
@angular/bazel
TuxCare:npm
 15.2.10-tuxcare.0 up to 15.2.10-tuxcare.8, plus listed versions
15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.415.2.10-tuxcare.515.2.10-tuxcare.615.2.10-tuxcare.7
15.2.10-tuxcare.8
@angular/benchpress
TuxCare:npm
 15.2.10-tuxcare.0 up to 15.2.10-tuxcare.8, plus listed versions
15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.415.2.10-tuxcare.515.2.10-tuxcare.615.2.10-tuxcare.7
15.2.10-tuxcare.8
@angular/language-service
TuxCare:npm
 15.2.10-tuxcare.0 up to 15.2.10-tuxcare.8, plus listed versions
15.2.1015.2.10-tuxcare.115.2.10-tuxcare.215.2.10-tuxcare.315.2.10-tuxcare.415.2.10-tuxcare.515.2.10-tuxcare.615.2.10-tuxcare.7
15.2.10-tuxcare.8
@angular/bazel
TuxCare:npm
 16.2.12-tuxcare.0 up to 16.2.12-tuxcare.10, plus listed versions
16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4
Show 5 moreShow less
16.2.12-tuxcare.516.2.12-tuxcare.616.2.12-tuxcare.716.2.12-tuxcare.816.2.12-tuxcare.9
16.2.12-tuxcare.10
@angular/benchpress
TuxCare:npm
 16.2.12-tuxcare.0 up to 16.2.12-tuxcare.10, plus listed versions
16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4
Show 5 moreShow less
16.2.12-tuxcare.516.2.12-tuxcare.616.2.12-tuxcare.716.2.12-tuxcare.816.2.12-tuxcare.9
16.2.12-tuxcare.10
@angular/language-service
TuxCare:npm
 16.2.12-tuxcare.0 up to 16.2.12-tuxcare.10, plus listed versions
16.2.1216.2.12-tuxcare.116.2.12-tuxcare.216.2.12-tuxcare.316.2.12-tuxcare.4
Show 5 moreShow less
16.2.12-tuxcare.516.2.12-tuxcare.616.2.12-tuxcare.716.2.12-tuxcare.816.2.12-tuxcare.9
16.2.12-tuxcare.10
@angular/bazel
TuxCare:npm
 6.1.10-tuxcare.0 up to 6.1.10-tuxcare.8, plus listed versions
6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.36.1.10-tuxcare.46.1.10-tuxcare.56.1.10-tuxcare.66.1.10-tuxcare.7
6.1.10-tuxcare.8
@angular/benchpress
TuxCare:npm
 6.1.10-tuxcare.0 up to 6.1.10-tuxcare.8, plus listed versions
6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.36.1.10-tuxcare.46.1.10-tuxcare.56.1.10-tuxcare.66.1.10-tuxcare.7
6.1.10-tuxcare.8
@angular/http
TuxCare:npm
 6.1.10-tuxcare.0 up to 6.1.10-tuxcare.8, plus listed versions
6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.36.1.10-tuxcare.46.1.10-tuxcare.56.1.10-tuxcare.66.1.10-tuxcare.7
6.1.10-tuxcare.8
@angular/language-service
TuxCare:npm
 6.1.10-tuxcare.0 up to 6.1.10-tuxcare.8, plus listed versions
6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.36.1.10-tuxcare.46.1.10-tuxcare.56.1.10-tuxcare.66.1.10-tuxcare.7
6.1.10-tuxcare.8
@angular/platform-webworker
TuxCare:npm
 6.1.10-tuxcare.0 up to 6.1.10-tuxcare.8, plus listed versions
6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.36.1.10-tuxcare.46.1.10-tuxcare.56.1.10-tuxcare.66.1.10-tuxcare.7
6.1.10-tuxcare.8
@angular/platform-webworker-dynamic
TuxCare:npm
 6.1.10-tuxcare.0 up to 6.1.10-tuxcare.8, plus listed versions
6.1.106.1.10-tuxcare.16.1.10-tuxcare.26.1.10-tuxcare.36.1.10-tuxcare.46.1.10-tuxcare.56.1.10-tuxcare.66.1.10-tuxcare.7
6.1.10-tuxcare.8
@angular/bazel
TuxCare:npm
From an advisory covering 7 CVEs
 5.2.11-tuxcare.0 up to 5.2.11-tuxcare.8, plus listed versions
5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.35.2.11-tuxcare.45.2.11-tuxcare.55.2.11-tuxcare.65.2.11-tuxcare.7
5.2.11-tuxcare.8
@angular/benchpress
TuxCare:npm
From an advisory covering 7 CVEs
 5.2.11-tuxcare.0 up to 5.2.11-tuxcare.8, plus listed versions
5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.35.2.11-tuxcare.45.2.11-tuxcare.55.2.11-tuxcare.65.2.11-tuxcare.7
5.2.11-tuxcare.8
@angular/http
TuxCare:npm
From an advisory covering 7 CVEs
 5.2.11-tuxcare.0 up to 5.2.11-tuxcare.8, plus listed versions
5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.35.2.11-tuxcare.45.2.11-tuxcare.55.2.11-tuxcare.65.2.11-tuxcare.7
5.2.11-tuxcare.8
@angular/language-service
TuxCare:npm
From an advisory covering 7 CVEs
 5.2.11-tuxcare.0 up to 5.2.11-tuxcare.8, plus listed versions
5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.35.2.11-tuxcare.45.2.11-tuxcare.55.2.11-tuxcare.65.2.11-tuxcare.7
5.2.11-tuxcare.8
@angular/platform-webworker
TuxCare:npm
From an advisory covering 7 CVEs
 5.2.11-tuxcare.0 up to 5.2.11-tuxcare.8, plus listed versions
5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.35.2.11-tuxcare.45.2.11-tuxcare.55.2.11-tuxcare.65.2.11-tuxcare.7
5.2.11-tuxcare.8
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 7 CVEs
 5.2.11-tuxcare.0 up to 5.2.11-tuxcare.8, plus listed versions
5.2.115.2.11-tuxcare.15.2.11-tuxcare.25.2.11-tuxcare.35.2.11-tuxcare.45.2.11-tuxcare.55.2.11-tuxcare.65.2.11-tuxcare.7
5.2.11-tuxcare.8
@angular/benchpress
TuxCare:npm
From an advisory covering 7 CVEs
 4.4.7-tuxcare.0 up to 4.4.7-tuxcare.8, plus listed versions
4.4.74.4.7-tuxcare.14.4.7-tuxcare.24.4.7-tuxcare.34.4.7-tuxcare.44.4.7-tuxcare.54.4.7-tuxcare.64.4.7-tuxcare.7
4.4.7-tuxcare.8
@angular/http
TuxCare:npm
From an advisory covering 7 CVEs
 4.4.7-tuxcare.0 up to 4.4.7-tuxcare.8, plus listed versions
4.4.74.4.7-tuxcare.14.4.7-tuxcare.24.4.7-tuxcare.34.4.7-tuxcare.44.4.7-tuxcare.54.4.7-tuxcare.64.4.7-tuxcare.7
4.4.7-tuxcare.8
@angular/language-service
TuxCare:npm
From an advisory covering 7 CVEs
 4.4.7-tuxcare.0 up to 4.4.7-tuxcare.8, plus listed versions
4.4.74.4.7-tuxcare.14.4.7-tuxcare.24.4.7-tuxcare.34.4.7-tuxcare.44.4.7-tuxcare.54.4.7-tuxcare.64.4.7-tuxcare.7
4.4.7-tuxcare.8
@angular/platform-webworker
TuxCare:npm
From an advisory covering 7 CVEs
 4.4.7-tuxcare.0 up to 4.4.7-tuxcare.8, plus listed versions
4.4.74.4.7-tuxcare.14.4.7-tuxcare.24.4.7-tuxcare.34.4.7-tuxcare.44.4.7-tuxcare.54.4.7-tuxcare.64.4.7-tuxcare.7
4.4.7-tuxcare.8
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 7 CVEs
 4.4.7-tuxcare.0 up to 4.4.7-tuxcare.8, plus listed versions
4.4.74.4.7-tuxcare.14.4.7-tuxcare.24.4.7-tuxcare.34.4.7-tuxcare.44.4.7-tuxcare.54.4.7-tuxcare.64.4.7-tuxcare.7
4.4.7-tuxcare.8
@angular/bazel
TuxCare:npm
From an advisory covering 15 CVEs
 18.1.2-tuxcare.0 up to 18.1.2-tuxcare.2, plus listed versions
18.1.218.1.2-tuxcare.1
18.1.2-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 15 CVEs
 18.1.2-tuxcare.0 up to 18.1.2-tuxcare.2, plus listed versions
18.1.218.1.2-tuxcare.1
18.1.2-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 15 CVEs
 18.1.2-tuxcare.0 up to 18.1.2-tuxcare.2, plus listed versions
18.1.218.1.2-tuxcare.1
18.1.2-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 15 CVEs
 18.2.12-tuxcare.0 up to 18.2.12-tuxcare.2, plus listed versions
18.2.1218.2.12-tuxcare.1
18.2.12-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 15 CVEs
 18.2.12-tuxcare.0 up to 18.2.12-tuxcare.2, plus listed versions
18.2.1218.2.12-tuxcare.1
18.2.12-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 15 CVEs
 18.2.12-tuxcare.0 up to 18.2.12-tuxcare.2, plus listed versions
18.2.1218.2.12-tuxcare.1
18.2.12-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 8 CVEs
 7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions
7.2.0
7.2.0-tuxcare.1
@angular/benchpress
TuxCare:npm
From an advisory covering 8 CVEs
 7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions
7.2.0
7.2.0-tuxcare.1
@angular/http
TuxCare:npm
From an advisory covering 8 CVEs
 7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions
7.2.0
7.2.0-tuxcare.1
@angular/language-service
TuxCare:npm
From an advisory covering 8 CVEs
 7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions
7.2.0
7.2.0-tuxcare.1
@angular/platform-webworker
TuxCare:npm
From an advisory covering 8 CVEs
 7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions
7.2.0
7.2.0-tuxcare.1
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 8 CVEs
 7.2.0-tuxcare.0 up to 7.2.0-tuxcare.1, plus listed versions
7.2.0
7.2.0-tuxcare.1
@angular/bazel
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.1-tuxcare.0 up to 7.2.1-tuxcare.3, plus listed versions
7.2.17.2.1-tuxcare.17.2.1-tuxcare.2
7.2.1-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.1-tuxcare.0 up to 7.2.1-tuxcare.3, plus listed versions
7.2.17.2.1-tuxcare.17.2.1-tuxcare.2
7.2.1-tuxcare.3
@angular/http
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.1-tuxcare.0 up to 7.2.1-tuxcare.3, plus listed versions
7.2.17.2.1-tuxcare.17.2.1-tuxcare.2
7.2.1-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.1-tuxcare.0 up to 7.2.1-tuxcare.3, plus listed versions
7.2.17.2.1-tuxcare.17.2.1-tuxcare.2
7.2.1-tuxcare.3
@angular/platform-webworker
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.1-tuxcare.0 up to 7.2.1-tuxcare.3, plus listed versions
7.2.17.2.1-tuxcare.17.2.1-tuxcare.2
7.2.1-tuxcare.3
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.1-tuxcare.0 up to 7.2.1-tuxcare.3, plus listed versions
7.2.17.2.1-tuxcare.17.2.1-tuxcare.2
7.2.1-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.11-tuxcare.0 up to 7.2.11-tuxcare.3, plus listed versions
7.2.117.2.11-tuxcare.17.2.11-tuxcare.2
7.2.11-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.11-tuxcare.0 up to 7.2.11-tuxcare.3, plus listed versions
7.2.117.2.11-tuxcare.17.2.11-tuxcare.2
7.2.11-tuxcare.3
@angular/http
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.11-tuxcare.0 up to 7.2.11-tuxcare.3, plus listed versions
7.2.117.2.11-tuxcare.17.2.11-tuxcare.2
7.2.11-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.11-tuxcare.0 up to 7.2.11-tuxcare.3, plus listed versions
7.2.117.2.11-tuxcare.17.2.11-tuxcare.2
7.2.11-tuxcare.3
@angular/platform-webworker
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.11-tuxcare.0 up to 7.2.11-tuxcare.3, plus listed versions
7.2.117.2.11-tuxcare.17.2.11-tuxcare.2
7.2.11-tuxcare.3
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 6 CVEs
 7.2.11-tuxcare.0 up to 7.2.11-tuxcare.3, plus listed versions
7.2.117.2.11-tuxcare.17.2.11-tuxcare.2
7.2.11-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 16 CVEs
 16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions
16.2.716.2.7-tuxcare.1
16.2.7-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 16 CVEs
 16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions
16.2.716.2.7-tuxcare.1
16.2.7-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 16 CVEs
 16.2.7-tuxcare.0 up to 16.2.7-tuxcare.2, plus listed versions
16.2.716.2.7-tuxcare.1
16.2.7-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 12 CVEs
 15.2.1-tuxcare.0 up to 15.2.1-tuxcare.2, plus listed versions
15.2.115.2.1-tuxcare.1
15.2.1-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 12 CVEs
 15.2.1-tuxcare.0 up to 15.2.1-tuxcare.2, plus listed versions
15.2.115.2.1-tuxcare.1
15.2.1-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 12 CVEs
 15.2.1-tuxcare.0 up to 15.2.1-tuxcare.2, plus listed versions
15.2.115.2.1-tuxcare.1
15.2.1-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 11 CVEs
 15.2.6-tuxcare.0 up to 15.2.6-tuxcare.2, plus listed versions
15.2.615.2.6-tuxcare.1
15.2.6-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 11 CVEs
 15.2.6-tuxcare.0 up to 15.2.6-tuxcare.2, plus listed versions
15.2.615.2.6-tuxcare.1
15.2.6-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 11 CVEs
 15.2.6-tuxcare.0 up to 15.2.6-tuxcare.2, plus listed versions
15.2.615.2.6-tuxcare.1
15.2.6-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 10 CVEs
 15.2.9-tuxcare.0 up to 15.2.9-tuxcare.2, plus listed versions
15.2.915.2.9-tuxcare.1
15.2.9-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 10 CVEs
 15.2.9-tuxcare.0 up to 15.2.9-tuxcare.2, plus listed versions
15.2.915.2.9-tuxcare.1
15.2.9-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 10 CVEs
 15.2.9-tuxcare.0 up to 15.2.9-tuxcare.2, plus listed versions
15.2.915.2.9-tuxcare.1
15.2.9-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 4 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/benchpress
TuxCare:npm
From an advisory covering 4 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/http
TuxCare:npm
From an advisory covering 4 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/language-service
TuxCare:npm
From an advisory covering 4 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/platform-webworker
TuxCare:npm
From an advisory covering 4 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 4 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/bazel
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.0-tuxcare.0 up to 8.0.0-tuxcare.3, plus listed versions
8.0.08.0.0-tuxcare.18.0.0-tuxcare.2
8.0.0-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.0-tuxcare.0 up to 8.0.0-tuxcare.3, plus listed versions
8.0.08.0.0-tuxcare.18.0.0-tuxcare.2
8.0.0-tuxcare.3
@angular/http
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.0-tuxcare.0 up to 8.0.0-tuxcare.3, plus listed versions
8.0.08.0.0-tuxcare.18.0.0-tuxcare.2
8.0.0-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.0-tuxcare.0 up to 8.0.0-tuxcare.3, plus listed versions
8.0.08.0.0-tuxcare.18.0.0-tuxcare.2
8.0.0-tuxcare.3
@angular/platform-webworker
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.0-tuxcare.0 up to 8.0.0-tuxcare.3, plus listed versions
8.0.08.0.0-tuxcare.18.0.0-tuxcare.2
8.0.0-tuxcare.3
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.0-tuxcare.0 up to 8.0.0-tuxcare.3, plus listed versions
8.0.08.0.0-tuxcare.18.0.0-tuxcare.2
8.0.0-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 11 CVEs
 12.0.0-tuxcare.0 up to 12.0.0-tuxcare.3, plus listed versions
12.0.012.0.0-tuxcare.112.0.0-tuxcare.2
12.0.0-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 11 CVEs
 12.0.0-tuxcare.0 up to 12.0.0-tuxcare.3, plus listed versions
12.0.012.0.0-tuxcare.112.0.0-tuxcare.2
12.0.0-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 11 CVEs
 12.0.0-tuxcare.0 up to 12.0.0-tuxcare.3, plus listed versions
12.0.012.0.0-tuxcare.112.0.0-tuxcare.2
12.0.0-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 12 CVEs
 12.2.16-tuxcare.0 up to 12.2.16-tuxcare.3, plus listed versions
12.2.1612.2.16-tuxcare.112.2.16-tuxcare.2
12.2.16-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 12 CVEs
 12.2.16-tuxcare.0 up to 12.2.16-tuxcare.3, plus listed versions
12.2.1612.2.16-tuxcare.112.2.16-tuxcare.2
12.2.16-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 12 CVEs
 12.2.16-tuxcare.0 up to 12.2.16-tuxcare.3, plus listed versions
12.2.1612.2.16-tuxcare.112.2.16-tuxcare.2
12.2.16-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 12 CVEs
 15.2.2-tuxcare.0 up to 15.2.2-tuxcare.2, plus listed versions
15.2.215.2.2-tuxcare.1
15.2.2-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 12 CVEs
 15.2.2-tuxcare.0 up to 15.2.2-tuxcare.2, plus listed versions
15.2.215.2.2-tuxcare.1
15.2.2-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 12 CVEs
 15.2.2-tuxcare.0 up to 15.2.2-tuxcare.2, plus listed versions
15.2.215.2.2-tuxcare.1
15.2.2-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 11 CVEs
 12.2.0-tuxcare.0 up to 12.2.0-tuxcare.3, plus listed versions
12.2.012.2.0-tuxcare.112.2.0-tuxcare.2
12.2.0-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 11 CVEs
 12.2.0-tuxcare.0 up to 12.2.0-tuxcare.3, plus listed versions
12.2.012.2.0-tuxcare.112.2.0-tuxcare.2
12.2.0-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 11 CVEs
 12.2.0-tuxcare.0 up to 12.2.0-tuxcare.3, plus listed versions
12.2.012.2.0-tuxcare.112.2.0-tuxcare.2
12.2.0-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 15 CVEs
 13.3.11-tuxcare.0 up to 13.3.11-tuxcare.1, plus listed versions
13.3.11
13.3.11-tuxcare.1
@angular/benchpress
TuxCare:npm
From an advisory covering 15 CVEs
 13.3.11-tuxcare.0 up to 13.3.11-tuxcare.1, plus listed versions
13.3.11
13.3.11-tuxcare.1
@angular/language-service
TuxCare:npm
From an advisory covering 15 CVEs
 13.3.11-tuxcare.0 up to 13.3.11-tuxcare.1, plus listed versions
13.3.11
13.3.11-tuxcare.1
@angular/bazel
TuxCare:npm
From an advisory covering 11 CVEs
 13.3.0-tuxcare.0 up to 13.3.0-tuxcare.2, plus listed versions
13.3.013.3.0-tuxcare.1
13.3.0-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 11 CVEs
 13.3.0-tuxcare.0 up to 13.3.0-tuxcare.2, plus listed versions
13.3.013.3.0-tuxcare.1
13.3.0-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 11 CVEs
 13.3.0-tuxcare.0 up to 13.3.0-tuxcare.2, plus listed versions
13.3.013.3.0-tuxcare.1
13.3.0-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 12 CVEs
 13.3.12-tuxcare.0 up to 13.3.12-tuxcare.2, plus listed versions
13.3.1213.3.12-tuxcare.1
13.3.12-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 12 CVEs
 13.3.12-tuxcare.0 up to 13.3.12-tuxcare.2, plus listed versions
13.3.1213.3.12-tuxcare.1
13.3.12-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 12 CVEs
 13.3.12-tuxcare.0 up to 13.3.12-tuxcare.2, plus listed versions
13.3.1213.3.12-tuxcare.1
13.3.12-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 13 CVEs
 15.0.3-tuxcare.0 up to 15.0.3-tuxcare.2, plus listed versions
15.0.315.0.3-tuxcare.1
15.0.3-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 13 CVEs
 15.0.3-tuxcare.0 up to 15.0.3-tuxcare.2, plus listed versions
15.0.315.0.3-tuxcare.1
15.0.3-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 13 CVEs
 15.0.3-tuxcare.0 up to 15.0.3-tuxcare.2, plus listed versions
15.0.315.0.3-tuxcare.1
15.0.3-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 4 CVEs
 10.1.0-tuxcare.0 up to 10.1.0-tuxcare.3, plus listed versions
10.1.010.1.0-tuxcare.110.1.0-tuxcare.2
10.1.0-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 4 CVEs
 10.1.0-tuxcare.0 up to 10.1.0-tuxcare.3, plus listed versions
10.1.010.1.0-tuxcare.110.1.0-tuxcare.2
10.1.0-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 4 CVEs
 10.1.0-tuxcare.0 up to 10.1.0-tuxcare.3, plus listed versions
10.1.010.1.0-tuxcare.110.1.0-tuxcare.2
10.1.0-tuxcare.3
@angular/platform-webworker
TuxCare:npm
From an advisory covering 4 CVEs
 10.1.0-tuxcare.0 up to 10.1.0-tuxcare.3, plus listed versions
10.1.010.1.0-tuxcare.110.1.0-tuxcare.2
10.1.0-tuxcare.3
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 4 CVEs
 10.1.0-tuxcare.0 up to 10.1.0-tuxcare.3, plus listed versions
10.1.010.1.0-tuxcare.110.1.0-tuxcare.2
10.1.0-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 20 CVEs
 16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions
16.2.11
16.2.11-tuxcare.1
@angular/benchpress
TuxCare:npm
From an advisory covering 20 CVEs
 16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions
16.2.11
16.2.11-tuxcare.1
@angular/language-service
TuxCare:npm
From an advisory covering 20 CVEs
 16.2.11-tuxcare.0 up to 16.2.11-tuxcare.1, plus listed versions
16.2.11
16.2.11-tuxcare.1
@angular/bazel
TuxCare:npm
From an advisory covering 10 CVEs
 14.2.8-tuxcare.0 up to 14.2.8-tuxcare.2, plus listed versions
14.2.814.2.8-tuxcare.1
14.2.8-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 10 CVEs
 14.2.8-tuxcare.0 up to 14.2.8-tuxcare.2, plus listed versions
14.2.814.2.8-tuxcare.1
14.2.8-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 10 CVEs
 14.2.8-tuxcare.0 up to 14.2.8-tuxcare.2, plus listed versions
14.2.814.2.8-tuxcare.1
14.2.8-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 13 CVEs
 14.2.12-tuxcare.0 up to 14.2.12-tuxcare.2, plus listed versions
14.2.1214.2.12-tuxcare.1
14.2.12-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 13 CVEs
 14.2.12-tuxcare.0 up to 14.2.12-tuxcare.2, plus listed versions
14.2.1214.2.12-tuxcare.1
14.2.12-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 13 CVEs
 14.2.12-tuxcare.0 up to 14.2.12-tuxcare.2, plus listed versions
14.2.1214.2.12-tuxcare.1
14.2.12-tuxcare.2
@angular/bazel
TuxCare:npm
From an advisory covering 11 CVEs
 11.2.11-tuxcare.0 up to 11.2.11-tuxcare.3, plus listed versions
11.2.1111.2.11-tuxcare.111.2.11-tuxcare.2
11.2.11-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 11 CVEs
 11.2.11-tuxcare.0 up to 11.2.11-tuxcare.3, plus listed versions
11.2.1111.2.11-tuxcare.111.2.11-tuxcare.2
11.2.11-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 11 CVEs
 11.2.11-tuxcare.0 up to 11.2.11-tuxcare.3, plus listed versions
11.2.1111.2.11-tuxcare.111.2.11-tuxcare.2
11.2.11-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 5 CVEs
 6.0.1-tuxcare.0 up to 6.0.1-tuxcare.4, plus listed versions
6.0.16.0.1-tuxcare.16.0.1-tuxcare.26.0.1-tuxcare.3
6.0.1-tuxcare.4
@angular/benchpress
TuxCare:npm
From an advisory covering 5 CVEs
 6.0.1-tuxcare.0 up to 6.0.1-tuxcare.4, plus listed versions
6.0.16.0.1-tuxcare.16.0.1-tuxcare.26.0.1-tuxcare.3
6.0.1-tuxcare.4
@angular/http
TuxCare:npm
From an advisory covering 5 CVEs
 6.0.1-tuxcare.0 up to 6.0.1-tuxcare.4, plus listed versions
6.0.16.0.1-tuxcare.16.0.1-tuxcare.26.0.1-tuxcare.3
6.0.1-tuxcare.4
@angular/language-service
TuxCare:npm
From an advisory covering 5 CVEs
 6.0.1-tuxcare.0 up to 6.0.1-tuxcare.4, plus listed versions
6.0.16.0.1-tuxcare.16.0.1-tuxcare.26.0.1-tuxcare.3
6.0.1-tuxcare.4
@angular/platform-webworker
TuxCare:npm
From an advisory covering 5 CVEs
 6.0.1-tuxcare.0 up to 6.0.1-tuxcare.4, plus listed versions
6.0.16.0.1-tuxcare.16.0.1-tuxcare.26.0.1-tuxcare.3
6.0.1-tuxcare.4
@angular/platform-webworker-dynamic
TuxCare:npm
From an advisory covering 5 CVEs
 6.0.1-tuxcare.0 up to 6.0.1-tuxcare.4, plus listed versions
6.0.16.0.1-tuxcare.16.0.1-tuxcare.26.0.1-tuxcare.3
6.0.1-tuxcare.4
@angular/bazel
TuxCare:npm
From an advisory covering 11 CVEs
 11.2.0-tuxcare.0 up to 11.2.0-tuxcare.3, plus listed versions
11.2.011.2.0-tuxcare.111.2.0-tuxcare.2
11.2.0-tuxcare.3
@angular/benchpress
TuxCare:npm
From an advisory covering 11 CVEs
 11.2.0-tuxcare.0 up to 11.2.0-tuxcare.3, plus listed versions
11.2.011.2.0-tuxcare.111.2.0-tuxcare.2
11.2.0-tuxcare.3
@angular/language-service
TuxCare:npm
From an advisory covering 11 CVEs
 11.2.0-tuxcare.0 up to 11.2.0-tuxcare.3, plus listed versions
11.2.011.2.0-tuxcare.111.2.0-tuxcare.2
11.2.0-tuxcare.3
@angular/bazel
TuxCare:npm
From an advisory covering 17 CVEs
 17.1.0-tuxcare.0 up to 17.1.0-tuxcare.2, plus listed versions
17.1.017.1.0-tuxcare.1
17.1.0-tuxcare.2
@angular/benchpress
TuxCare:npm
From an advisory covering 17 CVEs
 17.1.0-tuxcare.0 up to 17.1.0-tuxcare.2, plus listed versions
17.1.017.1.0-tuxcare.1
17.1.0-tuxcare.2
@angular/language-service
TuxCare:npm
From an advisory covering 17 CVEs
 17.1.0-tuxcare.0 up to 17.1.0-tuxcare.2, plus listed versions
17.1.017.1.0-tuxcare.1
17.1.0-tuxcare.2
@angular/bazel
TuxCare:npm
 5.1.0-tuxcare.0 up to 5.1.0-tuxcare.3, plus listed versions
5.1.05.1.0-tuxcare.15.1.0-tuxcare.2
5.1.0-tuxcare.3
@angular/benchpress
TuxCare:npm
 5.1.0-tuxcare.0 up to 5.1.0-tuxcare.3, plus listed versions
5.1.05.1.0-tuxcare.15.1.0-tuxcare.2
5.1.0-tuxcare.3
@angular/http
TuxCare:npm
 5.1.0-tuxcare.0 up to 5.1.0-tuxcare.3, plus listed versions
5.1.05.1.0-tuxcare.15.1.0-tuxcare.2
5.1.0-tuxcare.3
@angular/language-service
TuxCare:npm
 5.1.0-tuxcare.0 up to 5.1.0-tuxcare.3, plus listed versions
5.1.05.1.0-tuxcare.15.1.0-tuxcare.2
5.1.0-tuxcare.3
@angular/platform-webworker
TuxCare:npm
 5.1.0-tuxcare.0 up to 5.1.0-tuxcare.3, plus listed versions
5.1.05.1.0-tuxcare.15.1.0-tuxcare.2
5.1.0-tuxcare.3
@angular/platform-webworker-dynamic
TuxCare:npm
 5.1.0-tuxcare.0 up to 5.1.0-tuxcare.3, plus listed versions
5.1.05.1.0-tuxcare.15.1.0-tuxcare.2
5.1.0-tuxcare.3
@angular/bazel
TuxCare:npm
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/benchpress
TuxCare:npm
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/http
TuxCare:npm
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/language-service
TuxCare:npm
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/platform-webworker
TuxCare:npm
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/platform-webworker-dynamic
TuxCare:npm
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/bazel
TuxCare:npm
 5.2.7-tuxcare.0 up to 5.2.7-tuxcare.4, plus listed versions
5.2.75.2.7-tuxcare.15.2.7-tuxcare.25.2.7-tuxcare.3
5.2.7-tuxcare.4
@angular/benchpress
TuxCare:npm
 5.2.7-tuxcare.0 up to 5.2.7-tuxcare.4, plus listed versions
5.2.75.2.7-tuxcare.15.2.7-tuxcare.25.2.7-tuxcare.3
5.2.7-tuxcare.4
@angular/http
TuxCare:npm
 5.2.7-tuxcare.0 up to 5.2.7-tuxcare.4, plus listed versions
5.2.75.2.7-tuxcare.15.2.7-tuxcare.25.2.7-tuxcare.3
5.2.7-tuxcare.4
@angular/language-service
TuxCare:npm
 5.2.7-tuxcare.0 up to 5.2.7-tuxcare.4, plus listed versions
5.2.75.2.7-tuxcare.15.2.7-tuxcare.25.2.7-tuxcare.3
5.2.7-tuxcare.4
@angular/platform-webworker
TuxCare:npm
 5.2.7-tuxcare.0 up to 5.2.7-tuxcare.4, plus listed versions
5.2.75.2.7-tuxcare.15.2.7-tuxcare.25.2.7-tuxcare.3
5.2.7-tuxcare.4
@angular/platform-webworker-dynamic
TuxCare:npm
 5.2.7-tuxcare.0 up to 5.2.7-tuxcare.4, plus listed versions
5.2.75.2.7-tuxcare.15.2.7-tuxcare.25.2.7-tuxcare.3
5.2.7-tuxcare.4
@angular/benchpress
TuxCare:npm
 4.3.5-tuxcare.0 up to 4.3.5-tuxcare.4, plus listed versions
4.3.54.3.5-tuxcare.14.3.5-tuxcare.24.3.5-tuxcare.3
4.3.5-tuxcare.4
@angular/http
TuxCare:npm
 4.3.5-tuxcare.0 up to 4.3.5-tuxcare.4, plus listed versions
4.3.54.3.5-tuxcare.14.3.5-tuxcare.24.3.5-tuxcare.3
4.3.5-tuxcare.4
@angular/language-service
TuxCare:npm
 4.3.5-tuxcare.0 up to 4.3.5-tuxcare.4, plus listed versions
4.3.54.3.5-tuxcare.14.3.5-tuxcare.24.3.5-tuxcare.3
4.3.5-tuxcare.4
@angular/platform-webworker
TuxCare:npm
 4.3.5-tuxcare.0 up to 4.3.5-tuxcare.4, plus listed versions
4.3.54.3.5-tuxcare.14.3.5-tuxcare.24.3.5-tuxcare.3
4.3.5-tuxcare.4
@angular/platform-webworker-dynamic
TuxCare:npm
 4.3.5-tuxcare.0 up to 4.3.5-tuxcare.4, plus listed versions
4.3.54.3.5-tuxcare.14.3.5-tuxcare.24.3.5-tuxcare.3
4.3.5-tuxcare.4
@angular/animations
TuxCare:npm
 18.2.14-tuxcare.0 up to 18.2.14-tuxcare.10, plus listed versions
18.2.1418.2.14-tuxcare.118.2.14-tuxcare.218.2.14-tuxcare.318.2.14-tuxcare.4
Show 4 moreShow less
18.2.14-tuxcare.518.2.14-tuxcare.618.2.14-tuxcare.718.2.14-tuxcare.9
18.2.14-tuxcare.10
@angular/animations
TuxCare:npm
From an advisory covering 8 CVEs
 13.3.0-tuxcare.0 up to 13.3.0-tuxcare.2, plus listed versions
13.3.013.3.0-tuxcare.1
13.3.0-tuxcare.2
@angular/router
TuxCare:npm
From an advisory covering 6 CVEs
 8.0.3-tuxcare.0 up to 8.0.3-tuxcare.5, plus listed versions
8.0.38.0.3-tuxcare.18.0.3-tuxcare.28.0.3-tuxcare.38.0.3-tuxcare.4
8.0.3-tuxcare.5
@angular/router
TuxCare:npm
From an advisory covering 2 CVEs
 5.1.2-tuxcare.0 up to 5.1.2-tuxcare.3, plus listed versions
5.1.25.1.2-tuxcare.15.1.2-tuxcare.2
5.1.2-tuxcare.3
@angular/animations
TuxCare:npm
 11.2.14-tuxcare.0 up to 11.2.14-tuxcare.6, plus listed versions
11.2.1411.2.14-tuxcare.111.2.14-tuxcare.211.2.14-tuxcare.311.2.14-tuxcare.411.2.14-tuxcare.5
11.2.14-tuxcare.6
@angular/animations
TuxCare:npm
 10.2.5-tuxcare.0 up to 10.2.5-tuxcare.7, plus listed versions
10.2.510.2.5-tuxcare.110.2.5-tuxcare.210.2.5-tuxcare.310.2.5-tuxcare.410.2.5-tuxcare.510.2.5-tuxcare.6
10.2.5-tuxcare.7
@angular/animations
TuxCare:npm
 9.1.13-tuxcare.0 up to 9.1.13-tuxcare.9, plus listed versions
9.1.139.1.13-tuxcare.19.1.13-tuxcare.29.1.13-tuxcare.39.1.13-tuxcare.4
Show 4 moreShow less
9.1.13-tuxcare.59.1.13-tuxcare.69.1.13-tuxcare.79.1.13-tuxcare.8
9.1.13-tuxcare.9
@angular/animations
TuxCare:npm
 8.2.14-tuxcare.0 up to 8.2.14-tuxcare.8, plus listed versions
8.2.148.2.14-tuxcare.18.2.14-tuxcare.28.2.14-tuxcare.38.2.14-tuxcare.48.2.14-tuxcare.58.2.14-tuxcare.68.2.14-tuxcare.7
8.2.14-tuxcare.8
@angular/animations
TuxCare:npm
 7.2.16-tuxcare.0 up to 7.2.16-tuxcare.8, plus listed versions
7.2.167.2.16-tuxcare.17.2.16-tuxcare.27.2.16-tuxcare.37.2.16-tuxcare.47.2.16-tuxcare.57.2.16-tuxcare.67.2.16-tuxcare.7
7.2.16-tuxcare.8
@angular/animations
TuxCare:npm
 12.2.17-tuxcare.0 up to 12.2.17-tuxcare.6, plus listed versions
12.2.1712.2.17-tuxcare.112.2.17-tuxcare.212.2.17-tuxcare.312.2.17-tuxcare.412.2.17-tuxcare.5
12.2.17-tuxcare.6
@angular/animations
TuxCare:npm
 13.4.0-tuxcare.0 up to 13.4.0-tuxcare.6, plus listed versions
13.4.013.4.0-tuxcare.113.4.0-tuxcare.213.4.0-tuxcare.313.4.0-tuxcare.413.4.0-tuxcare.5
13.4.0-tuxcare.6
@angular/animations
TuxCare:npm
 17.3.12-tuxcare.0 up to 17.3.12-tuxcare.12, plus listed versions
17.3.1217.3.12-tuxcare.117.3.12-tuxcare.1017.3.12-tuxcare.1117.3.12-tuxcare.2
Show 7 moreShow less
17.3.12-tuxcare.317.3.12-tuxcare.417.3.12-tuxcare.517.3.12-tuxcare.617.3.12-tuxcare.717.3.12-tuxcare.817.3.12-tuxcare.9
17.3.12-tuxcare.12
angular.js
Debian:12
 All versions, plus listed versions
1.8.3-11.8.3-1+deb12u11.8.3-1+deb12u1~deb11u11.8.3-21.8.3-3
 None known
angular.js
Debian:13
 All versions, plus listed versions
1.8.3-3
 None known
angular.js
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.2.28-1ubuntu21.2.28-1ubuntu2+esm1
 None known
angular.js
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.5.10-11.5.10-1ubuntu0.1~esm1
 None known
angular.js
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.5.10-11.7.9-11.7.9-1ubuntu0.1~esm1
 None known
angular.js
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.8.2-21.8.2-2ubuntu0.1
 None known
angular.js
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.8.3-11.8.3-1ubuntu0.24.04.1
 None known
angular.js
Ubuntu:25.10
 All versions, plus listed versions
1.8.3-11.8.3-3
 None known
angular.js
Ubuntu:26.10
 All versions, plus listed versions
1.8.3-3
 None known
angular.js
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.8.3-3
 None known

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46417 is a high vulnerability (CVSS 8.8) in Angular, published May 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in @angular/platform-server 22.0.0-next.12.

References

Show 6 moreShow less
This page doesn't list everything

Also not on the record: 574 aliases and 612 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 624 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open