{"id":"CVE-2025-66412","aliases":["CLSA-2026-1775175794","CLSA-2026-1775176142","CLSA-2026-1775176146","CLSA-2026-1775176150","CLSA-2026-1775176152","CLSA-2026-1775176157","CLSA-2026-1775176159","CLSA-2026-1775176161","CLSA-2026-1775176163","CLSA-2026-1775176167","CLSA-2026-1775176172","CLSA-2026-1775176176","CLSA-2026-1775176181","CLSA-2026-1775176184","CLSA-2026-1781225627","CLSA-2026-1781225629","CLSA-2026-1781571270","CLSA-2026-1781571279","CLSA-2026-1781571280","CLSA-2026-1781571281","CLSA-2026-1781657683","CLSA-2026-1781657684","CLSA-2026-1781657685","CLSA-2026-1781657687","CLSA-2026-1781657688","CLSA-2026-1781657695","CLSA-2026-1781657706","CLSA-2026-1783040443","CLSA-2026-1783040463","CLSA-2026-1783126875","CLSA-2026-1783213288","CLSA-2026-1783213295","CLSA-2026-1783213296","CLSA-2026-1783213297","CLSA-2026-1783213298","CLSA-2026-1783299705","CLSA-2026-1792160914","CLSA-2026-1792160915","CLSA-2026-1792160921","CLSA-2026-1792160979","CLSA-2026-1792160983","CLSA-2026-1792160986","CLSA-2026-1792160987","CLSA-2026-1792161083","CLSA-2026-1792161087","CLSA-2026-1792161090","CLSA-2026-1792161092","CLSA-2026-1792161095","CLSA-2026-1792161097","CLSA-2026-1792161100","CLSA-2026-1792161102","CLSA-2026-1792161106","CLSA-2026-1792161107","CLSA-2026-1792161111","CLSA-2026-1792161112","CLSA-2026-1792161167","CLSA-2026-1792161168","CLSA-2026-1792161169","CLSA-2026-1792161170","CLSA-2026-1792161171","CLSA-2026-1792161172","CLSA-2026-1792161174","CLSA-2026-1792161175","CLSA-2026-1792161176","CLSA-2026-1792161177","CLSA-2026-1792161179","CLSA-2026-1792161181","CLSA-2026-1792161204","CLSA-2026-1792161208","CLSA-2026-1792161209","CLSA-2026-1792161210","CLSA-2026-1792161211","CLSA-2026-1792161217","CLSA-2026-1792161223","CLSA-2026-1792161225","CLSA-2026-1792161231","CLSA-2026-1792161234","CLSA-2026-1792161244","CLSA-2026-1792161249","CLSA-2026-1792161250","CLSA-2026-1792161251","CLSA-2026-1792161252","CLSA-2026-1792161253","CLSA-2026-1792161254","CLSA-2026-1792163472","CLSA-2026-1792163474","CLSA-2026-1792163476","CLSA-2026-1792163479","CLSA-2026-1792163482","CLSA-2026-1792163484","CLSA-2026-1792163486","CLSA-2026-1792163488","CLSA-2026-1792163490","CLSA-2026-1792163493","CLSA-2026-1792163495","DEBIAN-CVE-2025-66412","EUVD-2025-200118","GHSA-v4hv-rgfq-gp49","RHSA-2026:33371","UBUNTU-CVE-2025-66412"],"aliases_more":481,"status":"published","title":"Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","severity":{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00383,"percentile":0.32861,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2025-12-01T22:35:59Z","modified":"2026-11-10T19:58:36Z","fixes":[{"ecosystem":"npm","package":"@angular/compiler","fixed_in":["21.0.2","20.3.15","19.2.17"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/bazel","fixed_in":["8.2.14-tuxcare.4","9.1.13-tuxcare.2","10.2.5-tuxcare.2","11.2.14-tuxcare.2","12.2.17-tuxcare.2","13.4.0-tuxcare.2","14.3.0-tuxcare.4","15.2.10-tuxcare.5","16.2.12-tuxcare.5","18.2.14-tuxcare.3","5.1.0-tuxcare.1","8.0.3-tuxcare.3","5.2.7-tuxcare.2","6.0.1-tuxcare.3","8.0.0-tuxcare.2","10.1.0-tuxcare.2","12.0.0-tuxcare.2","12.2.0-tuxcare.2","12.2.16-tuxcare.2","7.2.1-tuxcare.2","11.2.0-tuxcare.2","11.2.11-tuxcare.2","18.1.2-tuxcare.3","15.0.3-tuxcare.3","18.2.12-tuxcare.3","13.3.12-tuxcare.3","17.1.0-tuxcare.3","13.3.0-tuxcare.3","14.2.8-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","fixed_in":["8.2.14-tuxcare.4","9.1.13-tuxcare.2","10.2.5-tuxcare.2","4.3.5-tuxcare.2","5.1.0-tuxcare.1","8.0.3-tuxcare.3","5.2.7-tuxcare.2","6.0.1-tuxcare.3","8.0.0-tuxcare.2","10.1.0-tuxcare.2","7.2.1-tuxcare.2"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/benchpress","fixed_in":["16.2.12-tuxcare.5","18.2.14-tuxcare.3","18.1.2-tuxcare.3","18.2.12-tuxcare.3","17.1.0-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/language-service","fixed_in":["16.2.12-tuxcare.5","18.2.14-tuxcare.3","18.1.2-tuxcare.3","18.2.12-tuxcare.3","17.1.0-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/animations","fixed_in":["6.1.10-tuxcare.4","12.2.17-tuxcare.2","11.2.0-tuxcare.2","7.2.16-tuxcare.4","5.2.11-tuxcare.4","8.2.14-tuxcare.4","9.1.13-tuxcare.2","10.2.5-tuxcare.2","11.2.14-tuxcare.2","13.4.0-tuxcare.2","14.3.0-tuxcare.4","15.2.10-tuxcare.5","16.2.12-tuxcare.5","17.3.12-tuxcare.5","18.2.14-tuxcare.3","4.3.5-tuxcare.2","5.1.0-tuxcare.1","8.0.3-tuxcare.3","5.2.7-tuxcare.2","6.0.1-tuxcare.3","8.0.0-tuxcare.2","10.1.0-tuxcare.2","12.0.0-tuxcare.2","12.2.0-tuxcare.2","12.2.16-tuxcare.2","7.2.1-tuxcare.2","11.2.11-tuxcare.2","18.1.2-tuxcare.3","15.0.3-tuxcare.3","18.2.12-tuxcare.3","13.3.12-tuxcare.3","17.1.0-tuxcare.3","13.3.0-tuxcare.3","14.2.8-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/router","fixed_in":["7.2.16-tuxcare.4","4.3.5-tuxcare.2","14.2.8-tuxcare.3","5.2.11-tuxcare.4","6.1.10-tuxcare.4","8.2.14-tuxcare.4","9.1.13-tuxcare.2","10.2.5-tuxcare.2","11.2.14-tuxcare.2","12.2.17-tuxcare.2","13.4.0-tuxcare.2","14.3.0-tuxcare.4","15.2.10-tuxcare.5","16.2.12-tuxcare.5","17.3.12-tuxcare.5","18.2.14-tuxcare.3","5.1.0-tuxcare.1","8.0.3-tuxcare.3","5.2.7-tuxcare.2","6.0.1-tuxcare.3","8.0.0-tuxcare.2","10.1.0-tuxcare.2","12.0.0-tuxcare.2","12.2.0-tuxcare.2","12.2.16-tuxcare.2","7.2.1-tuxcare.2","11.2.0-tuxcare.2","11.2.11-tuxcare.2","18.1.2-tuxcare.3","15.0.3-tuxcare.3","18.2.12-tuxcare.3","13.3.12-tuxcare.3","17.1.0-tuxcare.3","13.3.0-tuxcare.3","13.3.11-tuxcare.2"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/upgrade","fixed_in":["8.2.14-tuxcare.4","18.2.14-tuxcare.3","4.3.5-tuxcare.2","8.0.3-tuxcare.3","8.0.0-tuxcare.2","10.1.0-tuxcare.2","12.2.0-tuxcare.2","11.2.0-tuxcare.2","18.2.12-tuxcare.3","13.3.0-tuxcare.3","14.2.8-tuxcare.3","9.1.13-tuxcare.2","13.4.0-tuxcare.2","6.0.1-tuxcare.3","18.1.2-tuxcare.3","17.1.0-tuxcare.3","10.2.5-tuxcare.2","11.2.14-tuxcare.2","12.2.17-tuxcare.2","15.2.10-tuxcare.5","5.2.7-tuxcare.2","12.0.0-tuxcare.2","11.2.11-tuxcare.2","14.3.0-tuxcare.4","13.3.12-tuxcare.3","16.2.12-tuxcare.5","5.1.0-tuxcare.1","15.0.3-tuxcare.3","12.2.16-tuxcare.2","7.2.1-tuxcare.2"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/compiler","fixed_in":["7.2.16-tuxcare.4","10.2.5-tuxcare.2","15.2.10-tuxcare.5","5.1.0-tuxcare.1","6.0.1-tuxcare.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.0-next.0"},{"fixed":"21.0.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0-next.0"},{"fixed":"20.3.15"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0-next.0"},{"fixed":"19.2.17"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"18.2.14"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2","5.2.11-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2","5.2.11-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2","5.2.11-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2","5.2.11-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2","6.1.10-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2","6.1.10-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2","6.1.10-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2","6.1.10-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.4"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2","8.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.4"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2","8.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.2"}]}],"versions":["9.1.13","9.1.13-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.2"}]}],"versions":["9.1.13","9.1.13-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.2"}]}],"versions":["10.2.5","10.2.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.2"}]}],"versions":["10.2.5","10.2.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.2"}]}],"versions":["11.2.14","11.2.14-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.2"}]}],"versions":["12.2.17","12.2.17-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.2"}]}],"versions":["13.4.0","13.4.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.4"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.5"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.5"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.5"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.5"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.3"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.3"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.3"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.2"}]}],"versions":["4.3.5","4.3.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.1"}]}],"versions":["5.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.1"}]}],"versions":["5.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.3"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.3"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.2"}]}],"versions":["5.2.7","5.2.7-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.2"}]}],"versions":["5.2.7","5.2.7-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.3"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.3"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.2"}]}],"versions":["8.0.0","8.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.2"}]}],"versions":["8.0.0","8.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.2"}]}],"versions":["10.1.0","10.1.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.2"}]}],"versions":["10.1.0","10.1.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.2"}]}],"versions":["12.0.0","12.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.2"}]}],"versions":["12.2.0","12.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.2"}]}],"versions":["12.2.16","12.2.16-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.2"}]}],"versions":["7.2.1","7.2.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.2"}]}],"versions":["7.2.1","7.2.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.2"}]}],"versions":["11.2.0","11.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.2"}]}],"versions":["11.2.11","11.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.3"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.3"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.3"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.3"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.3"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.3"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.3"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.3"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.3"}]}],"versions":["17.1.0","17.1.0-tuxcare.1","17.1.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.3"}]}],"versions":["17.1.0","17.1.0-tuxcare.1","17.1.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.3"}]}],"versions":["17.1.0","17.1.0-tuxcare.1","17.1.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.3"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.3"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.2"}]}],"versions":["12.2.17","12.2.17-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.2"}]}],"versions":["11.2.0","11.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.2"}]}],"versions":["4.3.5","4.3.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.3"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.3"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.4"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2","8.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.2"}]}],"versions":["9.1.13","9.1.13-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.2"}]}],"versions":["10.2.5","10.2.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.2"}]}],"versions":["11.2.14","11.2.14-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.2"}]}],"versions":["13.4.0","13.4.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.4"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.5"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.5"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.3"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.2"}]}],"versions":["4.3.5","4.3.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.1"}]}],"versions":["5.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.3"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.2"}]}],"versions":["5.2.7","5.2.7-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.3"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.2"}]}],"versions":["8.0.0","8.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.2"}]}],"versions":["10.1.0","10.1.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.2"}]}],"versions":["12.0.0","12.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.2"}]}],"versions":["12.2.0","12.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.2"}]}],"versions":["12.2.16","12.2.16-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.2"}]}],"versions":["7.2.1","7.2.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.2"}]}],"versions":["11.2.11","11.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.1"}]}],"versions":["7.2.0"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.2"}]}],"versions":["15.2.1","15.2.1-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.6-tuxcare.0"},{"fixed":"15.2.6-tuxcare.2"}]}],"versions":["15.2.6","15.2.6-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.9-tuxcare.0"},{"fixed":"15.2.9-tuxcare.2"}]}],"versions":["15.2.9","15.2.9-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.2"}]}],"versions":["15.2.2","15.2.2-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.2"}]}],"versions":["14.2.12","14.2.12-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.3"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.3"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.3"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.3"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.3"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.3"}]}],"versions":["17.1.0","17.1.0-tuxcare.1","17.1.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.3"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.2"}]}],"versions":["13.3.11","13.3.11-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.3"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.4"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2","8.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.2"}]}],"versions":["9.1.13","9.1.13-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.2"}]}],"versions":["10.2.5","10.2.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.2"}]}],"versions":["11.2.14","11.2.14-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.2"}]}],"versions":["12.2.17","12.2.17-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.2"}]}],"versions":["13.4.0","13.4.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.4"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.5"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.5"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.3"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.1"}]}],"versions":["5.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.3"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.2"}]}],"versions":["5.2.7","5.2.7-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.3"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.2"}]}],"versions":["8.0.0","8.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.2"}]}],"versions":["10.1.0","10.1.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.2"}]}],"versions":["12.0.0","12.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.2"}]}],"versions":["12.2.0","12.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.2"}]}],"versions":["12.2.16","12.2.16-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.2"}]}],"versions":["7.2.1","7.2.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.2"}]}],"versions":["11.2.0","11.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.2"}]}],"versions":["11.2.11","11.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.1"}]}],"versions":["7.2.0"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.2"}]}],"versions":["15.2.1","15.2.1-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.6-tuxcare.0"},{"fixed":"15.2.6-tuxcare.2"}]}],"versions":["15.2.6","15.2.6-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.9-tuxcare.0"},{"fixed":"15.2.9-tuxcare.2"}]}],"versions":["15.2.9","15.2.9-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.2"}]}],"versions":["15.2.2","15.2.2-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.2"}]}],"versions":["14.2.12","14.2.12-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.3"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.3"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.3"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.3"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.3"}]}],"versions":["17.1.0","17.1.0-tuxcare.1","17.1.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.3"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.2"}]}],"versions":["13.3.11","13.3.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.4"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2","8.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.3"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.2"}]}],"versions":["4.3.5","4.3.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.3"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.2"}]}],"versions":["8.0.0","8.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.2"}]}],"versions":["10.1.0","10.1.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.2"}]}],"versions":["12.2.0","12.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.2"}]}],"versions":["11.2.0","11.2.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.3"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.3"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.3"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.4"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.2"}]}],"versions":["9.1.13","9.1.13-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.2"}]}],"versions":["13.4.0","13.4.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.3"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.3"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.3"}]}],"versions":["17.1.0","17.1.0-tuxcare.1","17.1.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.2"}]}],"versions":["10.2.5","10.2.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.2"}]}],"versions":["11.2.14","11.2.14-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.2"}]}],"versions":["12.2.17","12.2.17-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.5"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.2"}]}],"versions":["5.2.7","5.2.7-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.2"}]}],"versions":["12.0.0","12.0.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.2"}]}],"versions":["11.2.11","11.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.4"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.3"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.5"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.1"}]}],"versions":["5.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.3"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.2"}]}],"versions":["13.3.11","13.3.11-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.2"}]}],"versions":["12.2.16","12.2.16-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.2"}]}],"versions":["7.2.1","7.2.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.4"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2","7.2.16-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.4"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.2"}]}],"versions":["10.2.5","10.2.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.5"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.1"}]}],"versions":["5.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.3"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2"]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"21.0.0-next.0"},{"fixed":"21.0.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"20.0.0-next.0"},{"fixed":"20.3.15"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"19.0.0-next.0"},{"fixed":"19.2.17"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"18.2.14"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-8.SP9_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.28-1ubuntu2","1.2.28-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.10-1","1.5.10-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.10-1","1.7.9-1","1.7.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.2-2","1.8.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-1","1.8.3-1ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-1","1.8.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]}],"affected_more":411,"products":[{"vendor":"angular","product":"angular"},{"vendor":"siemens","product":"ruggedcom rst2428p"},{"vendor":"siemens","product":"sidis prime"}],"references":[{"url":"https://github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49","tags":["x_refsource_CONFIRM","Third Party Advisory","advisory","web","article","report"]},{"url":"https://github.com/angular/angular/commit/1c6b0704fb63d051fab8acff84d076abfbc4893a","tags":["x_refsource_MISC","Patch","fix","web","article","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-485750.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66412","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v4hv-rgfq-gp49"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66412.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-66412","tags":["advisory"]},{"url":"https://github.com/angular/angular","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33371","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html/7.3.0_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423194","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-31703","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33004","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33371.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-29371","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-29371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29371","tags":["advisory"]},{"url":"https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1778","tags":["article"]},{"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2598","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/767506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13465","tags":["advisory"]},{"url":"https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15284","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15284","tags":["advisory"]},{"url":"https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9","tags":["article"]},{"url":"https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-23184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23184","tags":["advisory"]},{"url":"https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-23368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23368","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23368","tags":["advisory"]},{"url":"https://www.gruppotim.it/it/footer/red-team.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66412","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69873","tags":["advisory"]},{"url":"https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1002","tags":["advisory"]},{"url":"https://github.com/eclipse-vertx/vert.x/pull/5895","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24842","tags":["advisory"]},{"url":"https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46","tags":["article"]},{"url":"https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2025-66412","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-66412","title":"Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","status":"published","published":"2025-12-01T22:35:59.211Z","modified":"2026-06-02T13:00:31.963Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:53.157279Z"}],"euvd":[{"id":"EUVD-2025-200118","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","status":"published","published":"2025-12-01T22:35:59Z","modified":"2026-06-02T13:00:31Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:20:56.59039Z"}],"ghsa":[{"id":"GHSA-v4hv-rgfq-gp49","title":"Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes","description":"A **Stored Cross-Site Scripting ([XSS](https://angular.dev/best-practices/security#preventing-cross-site-scripting-xss))** vulnerability has been identified in the **Angular Template Compiler**. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain [`javascript:` URLs](https://developer.mozilla.org/en-US/Web/URI/Reference/Schemes/javascript)) as requiring strict URL security, enabling the injection of malicious scripts.\n\nAdditionally, a related vulnerability exists involving SVG animation elements (`\u003canimate\u003e`, `\u003cset\u003e`, `\u003canimateMotion\u003e`, `\u003canimateTransform\u003e`). The `attributeName` attribute on these elements was not properly validated, allowing attackers to dynamically target security-sensitive attributes like `href` or `xlink:href` on other elements. By binding `attributeName` to \"href\" and providing a `javascript:` URL in the `values` or `to` attribute, an attacker could bypass sanitization and execute arbitrary code.\n\nAttributes confirmed to be vulnerable include:\n*   SVG-related attributes: (e.g., `xlink:href`), and various MathML attributes (e.g., `math|href`, `annotation|href`).\n*   SVG animation `attributeName` attribute when bound to \"href\" or \"xlink:href\".\n\nWhen template binding is used to assign untrusted, user-controlled data to these attributes (e.g., `[attr.xlink:href]=\"maliciousURL\"` or `\u003canimate [attributeName]=\"'href'\" [values]=\"maliciousURL\"\u003e`), the compiler incorrectly falls back to a non-sanitizing context or fails to block the dangerous attribute assignment. This allows an attacker to inject a `javascript:URL` payload. Upon user interaction (like a click) on the element, or automatically in the case of animations, the malicious JavaScript executes in the context of the application's origin.\n\n### Impact\n\nWhen exploited, this vulnerability allows an attacker to execute arbitrary code within the context of the vulnerable application's domain. This enables:\n\n* **Session Hijacking:** Stealing session cookies and authentication tokens.  \n* **Data Exfiltration:** Capturing and transmitting sensitive user data.  \n* **Unauthorized Actions:** Performing actions on behalf of the user.\n\n### Patches\n\n- 19.2.17\n- 20.3.15\n- 21.0.2\n\n### Attack Preconditions\n\n* The victim's Angular application must render data derived from **untrusted input** (e.g., from a database or API) and bind it to one of the unsanitized URL attributes or the `attributeName` of an SVG animation element.\n* The victim must perform a **user interaction** (e.g., clicking) on the compromised element for the stored script to execute, or the animation must trigger the execution.\n\n### Workarounds\n\nIf you cannot upgrade, you can workaround the issue by ensuring that any data bound to the vulnerable attributes is never sourced from untrusted user input (e.g., database, API response, URL parameters).\n\n* **Avoid Affected Template Bindings:** Specifically avoid using template bindings (e.g., `[attr.xlink:href]=\"maliciousURL\"`) to assign untrusted data to the vulnerable SVG/MathML attributes.\n* **Avoid Dynamic `attributeName` on SVG Animations:** Do not bind untrusted data to the `attributeName` attribute of SVG animation elements (`\u003canimate\u003e`, `\u003cset\u003e`, etc.).\n* **Enable [Content Security Policy (CSP)](https://angular.dev/best-practices/security#content-security-policy):** Configure a robust CSP header that disallows `javascript:` URLs.","status":"published","published":"2025-12-02T01:20:30Z","modified":"2026-06-09T10:55:55Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:40:23.739691Z"}],"nvd":[{"id":"CVE-2025-66412","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","status":"published","published":"2025-12-01T23:15:53.89Z","modified":"2026-10-18T18:10:00.1Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:11:47.746175Z"}],"osv":[{"id":"CVE-2025-66412","title":"Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","status":"published","published":"2025-12-01T22:35:59.211Z","modified":"2026-10-28T02:30:37.099319424Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:52.202386Z"},{"id":"DEBIAN-CVE-2025-66412","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","status":"withdrawn","published":"2025-12-01T23:15:53.89Z","modified":"2025-12-14T00:29:58.855289Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"GHSA-v4hv-rgfq-gp49","title":"Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes","description":"A **Stored Cross-Site Scripting ([XSS](https://angular.dev/best-practices/security#preventing-cross-site-scripting-xss))** vulnerability has been identified in the **Angular Template Compiler**. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain [`javascript:` URLs](https://developer.mozilla.org/en-US/Web/URI/Reference/Schemes/javascript)) as requiring strict URL security, enabling the injection of malicious scripts.\n\nAdditionally, a related vulnerability exists involving SVG animation elements (`\u003canimate\u003e`, `\u003cset\u003e`, `\u003canimateMotion\u003e`, `\u003canimateTransform\u003e`). The `attributeName` attribute on these elements was not properly validated, allowing attackers to dynamically target security-sensitive attributes like `href` or `xlink:href` on other elements. By binding `attributeName` to \"href\" and providing a `javascript:` URL in the `values` or `to` attribute, an attacker could bypass sanitization and execute arbitrary code.\n\nAttributes confirmed to be vulnerable include:\n*   SVG-related attributes: (e.g., `xlink:href`), and various MathML attributes (e.g., `math|href`, `annotation|href`).\n*   SVG animation `attributeName` attribute when bound to \"href\" or \"xlink:href\".\n\nWhen template binding is used to assign untrusted, user-controlled data to these attributes (e.g., `[attr.xlink:href]=\"maliciousURL\"` or `\u003canimate [attributeName]=\"'href'\" [values]=\"maliciousURL\"\u003e`), the compiler incorrectly falls back to a non-sanitizing context or fails to block the dangerous attribute assignment. This allows an attacker to inject a `javascript:URL` payload. Upon user interaction (like a click) on the element, or automatically in the case of animations, the malicious JavaScript executes in the context of the application's origin.\n\n### Impact\n\nWhen exploited, this vulnerability allows an attacker to execute arbitrary code within the context of the vulnerable application's domain. This enables:\n\n* **Session Hijacking:** Stealing session cookies and authentication tokens.  \n* **Data Exfiltration:** Capturing and transmitting sensitive user data.  \n* **Unauthorized Actions:** Performing actions on behalf of the user.\n\n### Patches\n\n- 19.2.17\n- 20.3.15\n- 21.0.2\n\n### Attack Preconditions\n\n* The victim's Angular application must render data derived from **untrusted input** (e.g., from a database or API) and bind it to one of the unsanitized URL attributes or the `attributeName` of an SVG animation element.\n* The victim must perform a **user interaction** (e.g., clicking) on the compromised element for the stored script to execute, or the animation must trigger the execution.\n\n### Workarounds\n\nIf you cannot upgrade, you can workaround the issue by ensuring that any data bound to the vulnerable attributes is never sourced from untrusted user input (e.g., database, API response, URL parameters).\n\n* **Avoid Affected Template Bindings:** Specifically avoid using template bindings (e.g., `[attr.xlink:href]=\"maliciousURL\"`) to assign untrusted data to the vulnerable SVG/MathML attributes.\n* **Avoid Dynamic `attributeName` on SVG Animations:** Do not bind untrusted data to the `attributeName` attribute of SVG animation elements (`\u003canimate\u003e`, `\u003cset\u003e`, etc.).\n* **Enable [Content Security Policy (CSP)](https://angular.dev/best-practices/security#content-security-policy):** Configure a robust CSP header that disallows `javascript:` URLs.","status":"published","published":"2025-12-02T01:20:30Z","modified":"2026-09-10T03:50:32.096215862Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:56.639206Z"},{"id":"RHSA-2026:33371","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.18 security update","status":"published","published":"2026-06-30T10:49:44Z","modified":"2026-10-20T10:07:22Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"UBUNTU-CVE-2025-66412","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.","status":"published","published":"2025-12-01T23:15:00Z","modified":"2026-10-17T12:57:27.989424904Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"CLSA-2026-1775175794","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 4 @angular packages to address 2 CVEs. Fixed in 7.2.16-tuxcare.4.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-10-30T19:45:50.565029592Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176142","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 4 @angular packages to address 2 CVEs. Fixed in 5.2.11-tuxcare.4.","status":"published","published":"2026-08-04T14:52:20Z","modified":"2026-10-30T19:45:50.272244986Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176146","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 4 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.4.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T02:15:05.333163176Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176150","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 8.2.14-tuxcare.4.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.535981828Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176152","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 9.1.13-tuxcare.2.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:52.860858603Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176157","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 10.2.5-tuxcare.2.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.551929147Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176159","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.14-tuxcare.2.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.555906862Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176161","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.17-tuxcare.2.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.327339063Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176163","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.4.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:52.748683876Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176167","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 14.3.0-tuxcare.4.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:54.206182484Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176172","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 15.2.10-tuxcare.5.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.538648124Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176176","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 16.2.12-tuxcare.5.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-19T07:45:05.224045952Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176181","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 17.3.12-tuxcare.5.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-19T07:45:05.996867235Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176184","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.14-tuxcare.3.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-19T07:45:06.055136287Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1781225627","title":"TuxCare security update for @angular/platform-webworker-dynamic (1 CVE)","description":"TuxCare rebuilt @angular/platform-webworker-dynamic to address 1 CVE. Fixed in 4.3.5-tuxcare.2.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-30T19:45:54.935372287Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781225629","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 5.1.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T02:15:07.370966951Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781571270","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 8.0.3-tuxcare.3.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:58.047194586Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781571279","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 5.2.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:54.958342353Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781571280","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 6.0.1-tuxcare.3.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T02:15:05.326040287Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781571281","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 8.0.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:55.273058924Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657683","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 10.1.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:58.741451398Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657684","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.0.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:57.264163627Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657685","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:55.613193338Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657687","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.16-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:55.52617157Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657688","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 7.2.1-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:58.736372001Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657695","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:57.264749678Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781657706","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.11-tuxcare.2.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:57.340220875Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1783040443","title":"TuxCare security update for @angular (16 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 16 CVEs. Fixed in 16.2.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-19T07:45:27.981479526Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783040463","title":"TuxCare security update for @angular (20 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 20 CVEs. Fixed in 16.2.11-tuxcare.1.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-19T07:45:40.080245633Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783126875","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.1.2-tuxcare.3.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-19T07:45:24.629335545Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783213288","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 15.0.3-tuxcare.3.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-30T19:45:58.809082772Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783213295","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.12-tuxcare.3.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-23T19:28:13.008182081Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783213296","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.3.12-tuxcare.3.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-30T19:45:58.097742569Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783213297","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 17.1.0-tuxcare.3.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-19T07:45:22.316680641Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783213298","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.3.0-tuxcare.3.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-30T19:45:58.029618155Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783299705","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 14.2.8-tuxcare.3.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-10-30T19:45:56.339259894Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1792160914","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 6.1.10-tuxcare.4.","status":"published","published":"2026-10-16T14:28:30Z","modified":"2026-11-02T19:58:56.490044709Z","updated_at":"2026-11-02T20:21:47.341589Z"},{"id":"CLSA-2026-1792160915","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 12.2.17-tuxcare.2.","status":"published","published":"2026-10-16T14:28:31Z","modified":"2026-10-16T16:30:45.17190794Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792160921","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 11.2.0-tuxcare.2.","status":"published","published":"2026-10-16T14:28:37Z","modified":"2026-10-16T16:30:35.501443968Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792160979","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 7.2.16-tuxcare.4.","status":"published","published":"2026-10-16T14:29:35Z","modified":"2026-11-02T19:58:41.662509178Z","updated_at":"2026-11-02T20:22:55.181884Z"},{"id":"CLSA-2026-1792160983","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 4.3.5-tuxcare.2.","status":"published","published":"2026-10-16T14:29:39Z","modified":"2026-10-16T16:30:55.654245107Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792160986","title":"TuxCare security update for @angular/router (2 CVEs)","description":"TuxCare rebuilt @angular/router to address 2 CVEs. Fixed in 5.1.2-tuxcare.3.","status":"published","published":"2026-10-16T14:29:42Z","modified":"2026-11-02T19:58:47.322341555Z","updated_at":"2026-11-02T20:22:33.689046Z"},{"id":"CLSA-2026-1792160987","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.2.8-tuxcare.3.","status":"published","published":"2026-10-16T14:29:43Z","modified":"2026-10-16T16:30:54.745351517Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161083","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 7.2.16-tuxcare.4.","status":"published","published":"2026-10-16T14:31:22Z","modified":"2026-11-02T19:59:02.893032983Z","updated_at":"2026-11-02T20:21:23.736144Z"},{"id":"CLSA-2026-1792161087","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 5.2.11-tuxcare.4.","status":"published","published":"2026-10-16T14:31:26Z","modified":"2026-11-02T19:58:25.707445608Z","updated_at":"2026-11-02T20:24:04.539092Z"}]},"sources_more":{"osv":531}}