{"id":"CVE-2026-22610","aliases":["CLSA-2026-1774657389","CLSA-2026-1775176141","CLSA-2026-1775176145","CLSA-2026-1775176149","CLSA-2026-1775176156","CLSA-2026-1775176158","CLSA-2026-1775176160","CLSA-2026-1775176162","CLSA-2026-1775176164","CLSA-2026-1775176168","CLSA-2026-1775176171","CLSA-2026-1775176177","CLSA-2026-1775176181","CLSA-2026-1775176185","CLSA-2026-1781657682","CLSA-2026-1782954037","CLSA-2026-1782954038","CLSA-2026-1783040443","CLSA-2026-1783040463","CLSA-2026-1783126874","CLSA-2026-1792160980","CLSA-2026-1792161082","CLSA-2026-1792161086","CLSA-2026-1792161088","CLSA-2026-1792161089","CLSA-2026-1792161094","CLSA-2026-1792161096","CLSA-2026-1792161098","CLSA-2026-1792161099","CLSA-2026-1792161101","CLSA-2026-1792161103","CLSA-2026-1792161105","CLSA-2026-1792161108","CLSA-2026-1792161113","CLSA-2026-1792163469","CLSA-2026-1792163471","CLSA-2026-1792163473","CLSA-2026-1792163475","CLSA-2026-1792163481","CLSA-2026-1792163483","CLSA-2026-1792163485","CLSA-2026-1792163487","CLSA-2026-1792163489","CLSA-2026-1792163492","CLSA-2026-1792163496","CLSA-2026-1792163501","CLSA-2026-1792208078","CLSA-2026-1792208082","CLSA-2026-1792208083","CLSA-2026-1792208085","CLSA-2026-1792208450","CLSA-2026-1792208454","CLSA-2026-1792208496","CLSA-2026-1792208500","CLSA-2026-1792208501","CLSA-2026-1792208503","CLSA-2026-1792208516","CLSA-2026-1792208527","CLSA-2026-1792208531","CLSA-2026-1792208539","CLSA-2026-1792208540","CLSA-2026-1792250186","CLSA-2026-1792250189","CLSA-2026-1792250191","CLSA-2026-1792250193","CLSA-2026-1792250195","CLSA-2026-1792250225","CLSA-2026-1792250226","CLSA-2026-1792250227","CLSA-2026-1792250229","CLSA-2026-1792250230","CLSA-2026-1792250231","CLSA-2026-1792250232","CLSA-2026-1792250233","CLSA-2026-1792250235","CLSA-2026-1792250470","CLSA-2026-1792250476","CLSA-2026-1792250484","CLSA-2026-1792250485","CLSA-2026-1792250486","CLSA-2026-1792250487","CLSA-2026-1792250517","CLSA-2026-1792250518","CLSA-2026-1792250520","CLSA-2026-1792250521","CLSA-2026-1792250530","CLSA-2026-1792250531","CLSA-2026-1792250542","CLSA-2026-1792250555","CLSA-2026-1792250561","CLSA-2026-1792250563","CLSA-2026-1792250569","CLSA-2026-1792250571","CLSA-2026-1792250592","CLSA-2026-1792250603","CLSA-2026-1792250604","DEBIAN-CVE-2026-22610","EUVD-2026-1698","GHSA-jrmj-c5cx-3cw6","UBUNTU-CVE-2026-22610"],"aliases_more":176,"status":"published","title":"Angular has XSS Vulnerability via Unsanitized SVG Script Attributes","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","severity":{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00439,"percentile":0.38615,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-79"],"published":"2026-01-09T18:52:14Z","modified":"2026-11-10T19:58:36Z","exploits":[{"source":"pocgithub","id":"ashizZz/CVE-2026-22610","title":"ashizZz/CVE-2026-22610","date":"2026-01-18","url":"https://github.com/ashizZz/CVE-2026-22610"}],"fixes":[{"ecosystem":"npm","package":"@angular/compiler","fixed_in":["21.1.0-rc.0","21.0.7","20.3.16","19.2.18"],"sources":["ghsa","osv"]},{"ecosystem":"npm","package":"@angular/core","fixed_in":["21.1.0-rc.0","21.0.7","20.3.16","19.2.18"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/bazel","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","10.2.5-tuxcare.3","11.2.14-tuxcare.3","12.2.17-tuxcare.3","13.4.0-tuxcare.3","14.3.0-tuxcare.5","15.2.10-tuxcare.4","16.2.12-tuxcare.6","18.2.14-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/http","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","10.2.5-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","10.2.5-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/benchpress","fixed_in":["16.2.12-tuxcare.6","18.2.14-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/language-service","fixed_in":["16.2.12-tuxcare.6","18.2.14-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/router","fixed_in":["14.3.0-tuxcare.5","7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","10.2.5-tuxcare.3","11.2.14-tuxcare.3","12.2.17-tuxcare.3","13.4.0-tuxcare.3","15.2.10-tuxcare.4","16.2.12-tuxcare.6","18.2.14-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/animations","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","10.2.5-tuxcare.3","11.2.14-tuxcare.3","12.2.17-tuxcare.3","13.4.0-tuxcare.3","14.3.0-tuxcare.5","15.2.10-tuxcare.4","16.2.12-tuxcare.6","18.2.14-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/upgrade","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","12.2.17-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","10.2.5-tuxcare.3","11.2.14-tuxcare.3","14.3.0-tuxcare.5","18.2.14-tuxcare.4","13.4.0-tuxcare.3","16.2.12-tuxcare.6","15.2.10-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/compiler","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","13.4.0-tuxcare.3","18.2.14-tuxcare.4","8.2.14-tuxcare.3","5.2.7-tuxcare.4","4.3.5-tuxcare.4","9.1.13-tuxcare.6","10.2.5-tuxcare.3","11.2.14-tuxcare.3","12.2.17-tuxcare.3","14.3.0-tuxcare.5","15.2.10-tuxcare.4","16.2.12-tuxcare.6"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/common","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","8.2.14-tuxcare.3","9.1.13-tuxcare.6","11.2.14-tuxcare.3","13.4.0-tuxcare.3","15.2.10-tuxcare.4","16.2.12-tuxcare.6","18.2.14-tuxcare.4","10.2.5-tuxcare.3","12.2.17-tuxcare.3","14.3.0-tuxcare.5"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","14.3.0-tuxcare.5","15.2.10-tuxcare.4","8.2.14-tuxcare.3","9.1.13-tuxcare.6","12.2.17-tuxcare.3","10.2.5-tuxcare.3","11.2.14-tuxcare.3","13.4.0-tuxcare.3","16.2.12-tuxcare.6","18.2.14-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/core","fixed_in":["7.2.16-tuxcare.3","5.2.11-tuxcare.3","6.1.10-tuxcare.3","11.2.14-tuxcare.3","17.3.12-tuxcare.5","8.2.14-tuxcare.3","9.1.13-tuxcare.6","13.4.0-tuxcare.3","16.2.12-tuxcare.6","8.0.3-tuxcare.4","10.2.5-tuxcare.3","12.2.17-tuxcare.3","14.3.0-tuxcare.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.0-next.0"},{"fixed":"21.1.0-rc.0"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.0-next.0"},{"fixed":"21.1.0-rc.0"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.0-next.0"},{"fixed":"21.0.7"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.0-next.0"},{"fixed":"21.0.7"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0-next.0"},{"fixed":"20.3.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0-next.0"},{"fixed":"20.3.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0-next.0"},{"fixed":"19.2.18"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0-next.0"},{"fixed":"19.2.18"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"18.2.14"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"18.2.14"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1","5.2.11-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2","8.0.3-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2","8.0.3-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2","8.0.3-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.2"}]}],"versions":["18.1.2","18.1.2-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.2"}]}],"versions":["18.1.2","18.1.2-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.2"}]}],"versions":["18.1.2","18.1.2-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.2"}]}],"versions":["18.2.12","18.2.12-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.2"}]}],"versions":["18.2.12","18.2.12-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.2"}]}],"versions":["18.2.12","18.2.12-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.2"}]}],"versions":["17.1.0","17.1.0-tuxcare.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.2"}]}],"versions":["17.1.0","17.1.0-tuxcare.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.2"}]}],"versions":["17.1.0","17.1.0-tuxcare.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/animations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2","8.0.3-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.2"}]}],"versions":["18.2.12","18.2.12-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.3"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.2"}]}],"versions":["15.2.1","15.2.1-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.3"}]}],"versions":["12.2.16","12.2.16-tuxcare.1","12.2.16-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.1"}]}],"versions":["13.3.11"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.3"}]}],"versions":["10.1.0","10.1.0-tuxcare.1","10.1.0-tuxcare.2"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.2"}]}],"versions":["14.2.8","14.2.8-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.3"}]}],"versions":["11.2.0","11.2.0-tuxcare.1","11.2.0-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.3"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.3"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.2"}]}],"versions":["13.3.12","13.3.12-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.4"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.4"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.6-tuxcare.0"},{"fixed":"15.2.6-tuxcare.2"}]}],"versions":["15.2.6","15.2.6-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.3"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.2"}]}],"versions":["15.2.2","15.2.2-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.3"}]}],"versions":["12.2.0","12.2.0-tuxcare.1","12.2.0-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.2","8.0.3-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.3"}]}],"versions":["12.0.0","12.0.0-tuxcare.1","12.0.0-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.2"}]}],"versions":["18.1.2","18.1.2-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.1"}]}],"versions":["16.2.11"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.1"}]}],"versions":["7.2.0"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.3"}]}],"versions":["11.2.11","11.2.11-tuxcare.1","11.2.11-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.2"}]}],"versions":["13.3.0","13.3.0-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.9-tuxcare.0"},{"fixed":"15.2.9-tuxcare.2"}]}],"versions":["15.2.9","15.2.9-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.3"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.2"}]}],"versions":["15.0.3","15.0.3-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.2"}]}],"versions":["14.2.12","14.2.12-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.2"}]}],"versions":["17.1.0","17.1.0-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.4"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.4"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.2","15.2.10-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.2","8.0.3-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.4"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.2","18.2.14-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.3"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11-tuxcare.0"},{"fixed":"5.2.11-tuxcare.3"}]}],"versions":["5.2.11","5.2.11-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.3"}]}],"versions":["6.1.10","6.1.10-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.14-tuxcare.0"},{"fixed":"11.2.14-tuxcare.3"}]}],"versions":["11.2.14","11.2.14-tuxcare.1","11.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.5"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.2"}]}],"versions":["18.1.2","18.1.2-tuxcare.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.2"}]}],"versions":["18.2.12","18.2.12-tuxcare.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.3"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.2"}]}],"versions":["16.2.7","16.2.7-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.2"}]}],"versions":["15.2.1","15.2.1-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.3"}]}],"versions":["12.2.16","12.2.16-tuxcare.1","12.2.16-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.2"}]}],"versions":["15.2.2","15.2.2-tuxcare.1"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.3"}]}],"versions":["12.2.0","12.2.0-tuxcare.1","12.2.0-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.2"}]}],"versions":["13.3.0","13.3.0-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.2"}]}],"versions":["15.0.3","15.0.3-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.1.0-tuxcare.0"},{"fixed":"10.1.0-tuxcare.3"}]}],"versions":["10.1.0","10.1.0-tuxcare.1","10.1.0-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.2"}]}],"versions":["14.2.8","14.2.8-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.2"}]}],"versions":["14.2.12","14.2.12-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.4"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.1.0-tuxcare.0"},{"fixed":"17.1.0-tuxcare.2"}]}],"versions":["17.1.0","17.1.0-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.3"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.4"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.4"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.3"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.6"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.3"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.6"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.3-tuxcare.0"},{"fixed":"8.0.3-tuxcare.4"}]}],"versions":["8.0.3","8.0.3-tuxcare.1","8.0.3-tuxcare.2","8.0.3-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.3"}]}],"versions":["12.0.0","12.0.0-tuxcare.1","12.0.0-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.3"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.17-tuxcare.0"},{"fixed":"12.2.17-tuxcare.3"}]}],"versions":["12.2.17","12.2.17-tuxcare.1","12.2.17-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.5"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.3"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"21.1.0-next.0"},{"fixed":"21.1.0-rc.0"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"SEMVER","events":[{"introduced":"21.1.0-next.0"},{"fixed":"21.1.0-rc.0"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"21.0.0-next.0"},{"fixed":"21.0.7"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"SEMVER","events":[{"introduced":"21.0.0-next.0"},{"fixed":"21.0.7"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"20.0.0-next.0"},{"fixed":"20.3.16"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"SEMVER","events":[{"introduced":"20.0.0-next.0"},{"fixed":"20.3.16"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"19.0.0-next.0"},{"fixed":"19.2.18"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"SEMVER","events":[{"introduced":"19.0.0-next.0"},{"fixed":"19.2.18"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/compiler","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"18.2.14"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/core","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"18.2.14"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.28-1ubuntu2","1.2.28-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.10-1","1.5.10-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.10-1","1.7.9-1","1.7.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.2-2","1.8.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-1","1.8.3-1ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-1","1.8.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]}],"affected_more":105,"products":[{"vendor":"angular","product":"angular"},{"vendor":"siemens","product":"ruggedcom rst2428p"},{"vendor":"siemens","product":"sidis prime"}],"references":[{"url":"https://github.com/angular/angular/security/advisories/GHSA-jrmj-c5cx-3cw6","tags":["x_refsource_CONFIRM","Mitigation","Vendor Advisory","advisory","web","report"]},{"url":"https://github.com/angular/angular/pull/66318","tags":["x_refsource_MISC","Issue Tracking","fix","web","report"]},{"url":"https://github.com/angular/angular/commit/91dc91bae4a1bbefc58bef6ef739d0e02ab44d56","tags":["x_refsource_MISC","Patch","fix","web","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-485750.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22610","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jrmj-c5cx-3cw6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22610.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-22610","tags":["advisory"]},{"url":"https://github.com/angular/angular","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2026-22610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22610","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-22610","title":"Angular has XSS Vulnerability via Unsanitized SVG Script Attributes","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","status":"published","published":"2026-01-10T03:35:40.727Z","modified":"2026-06-02T13:00:45.332Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T13:39:05.585774Z"}],"euvd":[{"id":"EUVD-2026-1698","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","status":"published","published":"2026-01-10T03:35:40Z","modified":"2026-06-02T13:00:45Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:20:56.59039Z"}],"ghsa":[{"id":"GHSA-jrmj-c5cx-3cw6","title":"Angular has XSS Vulnerability via Unsanitized SVG Script Attributes","description":"A Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the `href` and `xlink:href` attributes of SVG `\u003cscript\u003e` elements as a **Resource URL** context.\n\nIn a standard security model, attributes that can load and execute code (like a script's source) should be strictly validated. However, because the compiler does not classify these specific SVG attributes correctly, it allows attackers to bypass Angular's built-in security protections.\n\nWhen template binding is used to assign user-controlled data to these attributes for example, `\u003cscript [attr.href]=\"userInput\"\u003e` the compiler treats the value as a standard string or a non-sensitive URL rather than a resource link. This enables an attacker to provide a malicious payload, such as a `data:text/javascript` URI or a link to an external malicious script.\n\n### Impact\nWhen successfully exploited, this vulnerability allows for **arbitrary JavaScript execution** within the context of the victim's browser session. This can lead to:\n- **Session Hijacking:** Stealing session cookies, localStorage data, or authentication tokens.\n- **Data Exfiltration:** Accessing and transmitting sensitive information displayed within the application.\n- **Unauthorized Actions:** Performing state-changing actions (like clicking buttons or submitting forms) on behalf of the authenticated user.\n\n### Attack Preconditions\n\n1. The victim application must explicitly use SVG `\u003cscript\u003e` elements within its templates.\n2. The application must use property or attribute binding (interpolation) for the `href` or `xlink:href` attributes of those SVG scripts.\n3. The data bound to these attributes must be derived from an untrusted source (e.g., URL parameters, user-submitted database entries, or unsanitized API responses).\n\n### Patches\n- 19.2.18\n- 20.3.16\n- 21.0.7\n- 21.1.0-rc.0\n\n### Workarounds\nUntil the patch is applied, developers should:\n\n- **Avoid Dynamic Bindings**: Do not use Angular template binding (e.g., `[attr.href]`) for SVG `\u003cscript\u003e` elements.\n- **Input Validation**: If dynamic values must be used, strictly validate the input against a strict allowlist of trusted URLs on the server side or before it reaches the template.\n\n### Resources\n\n- https://github.com/angular/angular/pull/66318","status":"published","published":"2026-01-09T18:52:14Z","modified":"2026-06-09T10:56:10Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:40:23.739691Z"}],"nvd":[{"id":"CVE-2026-22610","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","status":"published","published":"2026-01-10T04:16:01.517Z","modified":"2026-06-17T10:20:09.593Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:12:03.683495Z"}],"osv":[{"id":"CVE-2026-22610","title":"Angular has XSS Vulnerability via Unsanitized SVG Script Attributes","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","status":"published","published":"2026-01-10T03:35:40.727Z","modified":"2026-10-28T02:30:46.814600172Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:58.42038Z"},{"id":"DEBIAN-CVE-2026-22610","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","status":"withdrawn","published":"2026-01-10T04:16:01.517Z","modified":"2026-01-11T08:45:07.393962Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"GHSA-jrmj-c5cx-3cw6","title":"Angular has XSS Vulnerability via Unsanitized SVG Script Attributes","description":"A Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the `href` and `xlink:href` attributes of SVG `\u003cscript\u003e` elements as a **Resource URL** context.\n\nIn a standard security model, attributes that can load and execute code (like a script's source) should be strictly validated. However, because the compiler does not classify these specific SVG attributes correctly, it allows attackers to bypass Angular's built-in security protections.\n\nWhen template binding is used to assign user-controlled data to these attributes for example, `\u003cscript [attr.href]=\"userInput\"\u003e` the compiler treats the value as a standard string or a non-sensitive URL rather than a resource link. This enables an attacker to provide a malicious payload, such as a `data:text/javascript` URI or a link to an external malicious script.\n\n### Impact\nWhen successfully exploited, this vulnerability allows for **arbitrary JavaScript execution** within the context of the victim's browser session. This can lead to:\n- **Session Hijacking:** Stealing session cookies, localStorage data, or authentication tokens.\n- **Data Exfiltration:** Accessing and transmitting sensitive information displayed within the application.\n- **Unauthorized Actions:** Performing state-changing actions (like clicking buttons or submitting forms) on behalf of the authenticated user.\n\n### Attack Preconditions\n\n1. The victim application must explicitly use SVG `\u003cscript\u003e` elements within its templates.\n2. The application must use property or attribute binding (interpolation) for the `href` or `xlink:href` attributes of those SVG scripts.\n3. The data bound to these attributes must be derived from an untrusted source (e.g., URL parameters, user-submitted database entries, or unsanitized API responses).\n\n### Patches\n- 19.2.18\n- 20.3.16\n- 21.0.7\n- 21.1.0-rc.0\n\n### Workarounds\nUntil the patch is applied, developers should:\n\n- **Avoid Dynamic Bindings**: Do not use Angular template binding (e.g., `[attr.href]`) for SVG `\u003cscript\u003e` elements.\n- **Input Validation**: If dynamic values must be used, strictly validate the input against a strict allowlist of trusted URLs on the server side or before it reaches the template.\n\n### Resources\n\n- https://github.com/angular/angular/pull/66318","status":"published","published":"2026-01-09T18:52:14Z","modified":"2026-09-10T03:50:33.469090469Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:51.10002Z"},{"id":"UBUNTU-CVE-2026-22610","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG \u003cscript\u003e elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.","status":"published","published":"2026-01-10T04:16:00Z","modified":"2026-10-17T12:59:55.125853345Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"CLSA-2026-1774657389","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 4 @angular packages to address 1 CVE. Fixed in 7.2.16-tuxcare.3.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-10-30T19:45:51.799978864Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1775176141","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 4 @angular packages to address 1 CVE. Fixed in 5.2.11-tuxcare.3.","status":"published","published":"2026-08-04T14:52:20Z","modified":"2026-10-30T19:45:50.566453922Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176145","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 4 @angular packages to address 1 CVE. Fixed in 6.1.10-tuxcare.3.","status":"published","published":"2026-08-04T14:52:20Z","modified":"2026-10-30T02:15:05.329985075Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176149","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 8.2.14-tuxcare.3.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:51.908859492Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176156","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 9.1.13-tuxcare.6.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.536849723Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176158","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 10.2.5-tuxcare.3.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:54.309366937Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176160","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 11.2.14-tuxcare.3.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:51.954742983Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176162","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 12.2.17-tuxcare.3.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:54.350825105Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176164","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.4.0-tuxcare.3.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:52.777724968Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176168","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 14.3.0-tuxcare.5.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:54.313207751Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176171","title":"TuxCare security update for @angular/bazel (1 CVE)","description":"TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 15.2.10-tuxcare.4.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-30T19:45:53.537154182Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176177","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 16.2.12-tuxcare.6.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-19T07:45:07.091150966Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176181","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 17.3.12-tuxcare.5.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-19T07:45:05.996867235Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775176185","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.14-tuxcare.4.","status":"published","published":"2026-08-04T14:52:21Z","modified":"2026-10-19T07:45:07.686810588Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1781657682","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 8.0.3-tuxcare.4.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-10-30T19:45:55.297683222Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1782954037","title":"TuxCare security update for @angular (15 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 15 CVEs. Fixed in 18.1.2-tuxcare.2.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-23T19:28:14.157391401Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782954038","title":"TuxCare security update for @angular (15 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 15 CVEs. Fixed in 18.2.12-tuxcare.2.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-23T19:28:13.059049444Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783040443","title":"TuxCare security update for @angular (16 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 16 CVEs. Fixed in 16.2.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-19T07:45:27.981479526Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783040463","title":"TuxCare security update for @angular (20 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 20 CVEs. Fixed in 16.2.11-tuxcare.1.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-19T07:45:40.080245633Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783126874","title":"TuxCare security update for @angular (17 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 17 CVEs. Fixed in 17.1.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:41Z","modified":"2026-10-23T19:28:12.985288462Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1792160980","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.3.0-tuxcare.5.","status":"published","published":"2026-10-16T14:29:36Z","modified":"2026-10-21T20:30:16.717281798Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161082","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 7.2.16-tuxcare.3.","status":"published","published":"2026-10-16T14:31:21Z","modified":"2026-10-16T16:30:37.328959893Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161086","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 5.2.11-tuxcare.3.","status":"published","published":"2026-10-16T14:31:25Z","modified":"2026-10-16T16:30:37.38209832Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161088","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 6.1.10-tuxcare.3.","status":"published","published":"2026-10-16T14:31:27Z","modified":"2026-10-16T16:30:37.327783788Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161089","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 8.2.14-tuxcare.3.","status":"published","published":"2026-10-16T14:31:28Z","modified":"2026-10-16T16:30:37.382255568Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161094","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 9.1.13-tuxcare.6.","status":"published","published":"2026-10-16T14:31:33Z","modified":"2026-10-21T20:30:16.487487944Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161096","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 10.2.5-tuxcare.3.","status":"published","published":"2026-10-16T14:31:36Z","modified":"2026-10-16T16:30:25.233191452Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161098","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 11.2.14-tuxcare.3.","status":"published","published":"2026-10-16T14:31:38Z","modified":"2026-10-16T16:30:25.630324691Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161099","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 12.2.17-tuxcare.3.","status":"published","published":"2026-10-16T14:31:39Z","modified":"2026-10-16T16:30:47.975489941Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161101","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 13.4.0-tuxcare.3.","status":"published","published":"2026-10-16T14:31:41Z","modified":"2026-10-16T16:30:37.785589445Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161103","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 14.3.0-tuxcare.5.","status":"published","published":"2026-10-16T14:31:43Z","modified":"2026-10-21T20:30:16.716504491Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161105","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 15.2.10-tuxcare.4.","status":"published","published":"2026-10-16T14:31:45Z","modified":"2026-10-21T20:30:14.239643777Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161108","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 16.2.12-tuxcare.6.","status":"published","published":"2026-10-16T14:31:48Z","modified":"2026-10-21T20:30:16.717869974Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161113","title":"TuxCare security update for @angular/animations (1 CVE)","description":"TuxCare rebuilt @angular/animations to address 1 CVE. Fixed in 18.2.14-tuxcare.4.","status":"published","published":"2026-10-16T14:31:53Z","modified":"2026-10-21T20:31:01.236285154Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792163469","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 7.2.16-tuxcare.3.","status":"published","published":"2026-10-16T15:11:08Z","modified":"2026-10-16T16:31:45.283536879Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163471","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 5.2.11-tuxcare.3.","status":"published","published":"2026-10-16T15:11:10Z","modified":"2026-10-16T16:31:45.289612363Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163473","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 6.1.10-tuxcare.3.","status":"published","published":"2026-10-16T15:11:12Z","modified":"2026-10-16T16:31:45.287898543Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163475","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 8.2.14-tuxcare.3.","status":"published","published":"2026-10-16T15:11:14Z","modified":"2026-10-16T16:31:45.835072263Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163481","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 9.1.13-tuxcare.6.","status":"published","published":"2026-10-16T15:11:20Z","modified":"2026-10-21T20:31:03.891725163Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163483","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 10.2.5-tuxcare.3.","status":"published","published":"2026-10-16T15:11:22Z","modified":"2026-10-16T16:31:53.290103274Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163485","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 11.2.14-tuxcare.3.","status":"published","published":"2026-10-16T15:11:24Z","modified":"2026-10-16T16:31:53.56261565Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163487","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 12.2.17-tuxcare.3.","status":"published","published":"2026-10-16T15:11:26Z","modified":"2026-10-16T16:31:53.549082718Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163489","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 13.4.0-tuxcare.3.","status":"published","published":"2026-10-16T15:11:28Z","modified":"2026-10-16T16:31:53.547048463Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163492","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 15.2.10-tuxcare.4.","status":"published","published":"2026-10-16T15:11:32Z","modified":"2026-10-21T20:31:04.712143755Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163496","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 16.2.12-tuxcare.6.","status":"published","published":"2026-10-16T15:11:36Z","modified":"2026-10-21T20:31:06.570293845Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792163501","title":"TuxCare security update for @angular/router (1 CVE)","description":"TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 18.2.14-tuxcare.4.","status":"published","published":"2026-10-16T15:11:41Z","modified":"2026-10-21T20:31:07.22383212Z","updated_at":"2026-11-02T15:43:51.466048Z"}]},"sources_more":{"osv":226}}