{"id":"CVE-2026-88058","aliases":["CLSA-2026-1790430327","CLSA-2026-1790430437","CLSA-2026-1790431371","CLSA-2026-1790431555","CLSA-2026-1790431638","CLSA-2026-1790444143","CLSA-2026-1790444330","CLSA-2026-1790444584","CLSA-2026-1790445273","CLSA-2026-1790450474","CLSA-2026-1790450789","CLSA-2026-1790451381","CLSA-2026-1790453017","CLSA-2026-1790453168","CLSA-2026-1790453821","CLSA-2026-1790454526","CLSA-2026-1790456135","CLSA-2026-1790459428","CLSA-2026-1790460862","CLSA-2026-1790461484","CLSA-2026-1790461516","CLSA-2026-1790461536","CLSA-2026-1790464577","CLSA-2026-1790465478","CLSA-2026-1790465987","CLSA-2026-1790466289","CLSA-2026-1790469745","CLSA-2026-1790469964","CLSA-2026-1790470455","CLSA-2026-1790471349","CLSA-2026-1790474705","CLSA-2026-1790475892","CLSA-2026-1790476096","CLSA-2026-1790477222","CLSA-2026-1790477639","CLSA-2026-1790479220","CLSA-2026-1790480117","CLSA-2026-1790482357","CLSA-2026-1790483867","CLSA-2026-1790488353","CLSA-2026-1790489187","CLSA-2026-1790597611","CLSA-2026-1790597633","CLSA-2026-1790597654","CLSA-2026-1791045476","CLSA-2026-1791195835","CLSA-2026-1791196167","CLSA-2026-1792160928","CLSA-2026-1792160929","CLSA-2026-1792160930","CLSA-2026-1792160931","CLSA-2026-1792160990","CLSA-2026-1792160991","CLSA-2026-1792161305","CLSA-2026-1792161307","CLSA-2026-1792161308","CLSA-2026-1792161309","CLSA-2026-1792161310","CLSA-2026-1792161311","CLSA-2026-1792161312","CLSA-2026-1792161313","CLSA-2026-1792161314","CLSA-2026-1792161315","CLSA-2026-1792161316","CLSA-2026-1792161317","CLSA-2026-1792161319","CLSA-2026-1792161320","CLSA-2026-1792161321","CLSA-2026-1792161322","CLSA-2026-1792161323","CLSA-2026-1792161324","CLSA-2026-1792161325","CLSA-2026-1792161326","CLSA-2026-1792161327","CLSA-2026-1792161328","CLSA-2026-1792161330","CLSA-2026-1792161331","CLSA-2026-1792161332","CLSA-2026-1792161333","CLSA-2026-1792161335","CLSA-2026-1792161336","CLSA-2026-1792161337","CLSA-2026-1792161338","CLSA-2026-1792161339","CLSA-2026-1792161340","CLSA-2026-1792161342","CLSA-2026-1792161343","CLSA-2026-1792161344","CLSA-2026-1792161345","CLSA-2026-1792161346","CLSA-2026-1792161347","CLSA-2026-1792161349","CLSA-2026-1792161351","CLSA-2026-1792161353","CLSA-2026-1792161354","CLSA-2026-1792161355","DEBIAN-CVE-2026-88058","EUVD-2026-75681","GHSA-j3r3-mxqp-r2p4","UBUNTU-CVE-2026-88058"],"aliases_more":553,"status":"published","title":"Angular: SSR XSS via Unescaped Processing Instruction (\u003c?...?\u003e) Nodes in Fallback Raw-Content Elements","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","severity":{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00281,"percentile":0.20856,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-116","CWE-79"],"published":"2026-09-10T18:56:03Z","modified":"2026-11-10T19:58:25Z","fixes":[{"ecosystem":"npm","package":"@angular/platform-server","fixed_in":["22.1.4","21.2.22","20.3.30"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/bazel","fixed_in":["7.2.1-tuxcare.5"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/benchpress","fixed_in":["7.2.1-tuxcare.5"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/http","fixed_in":["7.2.1-tuxcare.5"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/language-service","fixed_in":["7.2.1-tuxcare.5"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","fixed_in":["7.2.1-tuxcare.5"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","fixed_in":["7.2.1-tuxcare.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"22.0.0"},{"fixed":"22.1.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.0"},{"fixed":"21.2.22"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0"},{"fixed":"20.3.30"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"19.2.25"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.12"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.10","10.2.5-tuxcare.11","10.2.5-tuxcare.2","10.2.5-tuxcare.3","10.2.5-tuxcare.4","10.2.5-tuxcare.5","10.2.5-tuxcare.6","10.2.5-tuxcare.7","10.2.5-tuxcare.8","10.2.5-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.12"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.10","10.2.5-tuxcare.11","10.2.5-tuxcare.2","10.2.5-tuxcare.3","10.2.5-tuxcare.4","10.2.5-tuxcare.5","10.2.5-tuxcare.6","10.2.5-tuxcare.7","10.2.5-tuxcare.8","10.2.5-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.12"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.10","10.2.5-tuxcare.11","10.2.5-tuxcare.2","10.2.5-tuxcare.3","10.2.5-tuxcare.4","10.2.5-tuxcare.5","10.2.5-tuxcare.6","10.2.5-tuxcare.7","10.2.5-tuxcare.8","10.2.5-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.12"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.10","10.2.5-tuxcare.11","10.2.5-tuxcare.2","10.2.5-tuxcare.3","10.2.5-tuxcare.4","10.2.5-tuxcare.5","10.2.5-tuxcare.6","10.2.5-tuxcare.7","10.2.5-tuxcare.8","10.2.5-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.2.5-tuxcare.0"},{"fixed":"10.2.5-tuxcare.12"}]}],"versions":["10.2.5","10.2.5-tuxcare.1","10.2.5-tuxcare.10","10.2.5-tuxcare.11","10.2.5-tuxcare.2","10.2.5-tuxcare.3","10.2.5-tuxcare.4","10.2.5-tuxcare.5","10.2.5-tuxcare.6","10.2.5-tuxcare.7","10.2.5-tuxcare.8","10.2.5-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.6"}]}],"versions":["11.2.0","11.2.0-tuxcare.1","11.2.0-tuxcare.2","11.2.0-tuxcare.3","11.2.0-tuxcare.4","11.2.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.6"}]}],"versions":["11.2.0","11.2.0-tuxcare.1","11.2.0-tuxcare.2","11.2.0-tuxcare.3","11.2.0-tuxcare.4","11.2.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0-tuxcare.0"},{"fixed":"11.2.0-tuxcare.6"}]}],"versions":["11.2.0","11.2.0-tuxcare.1","11.2.0-tuxcare.2","11.2.0-tuxcare.3","11.2.0-tuxcare.4","11.2.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.5"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2","8.0.0-tuxcare.3","8.0.0-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.5"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2","8.0.0-tuxcare.3","8.0.0-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.5"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2","8.0.0-tuxcare.3","8.0.0-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.5"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2","8.0.0-tuxcare.3","8.0.0-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.5"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2","8.0.0-tuxcare.3","8.0.0-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0-tuxcare.0"},{"fixed":"8.0.0-tuxcare.5"}]}],"versions":["8.0.0","8.0.0-tuxcare.1","8.0.0-tuxcare.2","8.0.0-tuxcare.3","8.0.0-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.13"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.10","8.2.14-tuxcare.11","8.2.14-tuxcare.12","8.2.14-tuxcare.2","8.2.14-tuxcare.3","8.2.14-tuxcare.4","8.2.14-tuxcare.5","8.2.14-tuxcare.6","8.2.14-tuxcare.7","8.2.14-tuxcare.8","8.2.14-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.13"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.10","8.2.14-tuxcare.11","8.2.14-tuxcare.12","8.2.14-tuxcare.2","8.2.14-tuxcare.3","8.2.14-tuxcare.4","8.2.14-tuxcare.5","8.2.14-tuxcare.6","8.2.14-tuxcare.7","8.2.14-tuxcare.8","8.2.14-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.13"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.10","8.2.14-tuxcare.11","8.2.14-tuxcare.12","8.2.14-tuxcare.2","8.2.14-tuxcare.3","8.2.14-tuxcare.4","8.2.14-tuxcare.5","8.2.14-tuxcare.6","8.2.14-tuxcare.7","8.2.14-tuxcare.8","8.2.14-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.13"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.10","8.2.14-tuxcare.11","8.2.14-tuxcare.12","8.2.14-tuxcare.2","8.2.14-tuxcare.3","8.2.14-tuxcare.4","8.2.14-tuxcare.5","8.2.14-tuxcare.6","8.2.14-tuxcare.7","8.2.14-tuxcare.8","8.2.14-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.13"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.10","8.2.14-tuxcare.11","8.2.14-tuxcare.12","8.2.14-tuxcare.2","8.2.14-tuxcare.3","8.2.14-tuxcare.4","8.2.14-tuxcare.5","8.2.14-tuxcare.6","8.2.14-tuxcare.7","8.2.14-tuxcare.8","8.2.14-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.14-tuxcare.0"},{"fixed":"8.2.14-tuxcare.13"}]}],"versions":["8.2.14","8.2.14-tuxcare.1","8.2.14-tuxcare.10","8.2.14-tuxcare.11","8.2.14-tuxcare.12","8.2.14-tuxcare.2","8.2.14-tuxcare.3","8.2.14-tuxcare.4","8.2.14-tuxcare.5","8.2.14-tuxcare.6","8.2.14-tuxcare.7","8.2.14-tuxcare.8","8.2.14-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.15"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.10","9.1.13-tuxcare.11","9.1.13-tuxcare.12","9.1.13-tuxcare.13","9.1.13-tuxcare.14","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5","9.1.13-tuxcare.6","9.1.13-tuxcare.7","9.1.13-tuxcare.8","9.1.13-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.15"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.10","9.1.13-tuxcare.11","9.1.13-tuxcare.12","9.1.13-tuxcare.13","9.1.13-tuxcare.14","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5","9.1.13-tuxcare.6","9.1.13-tuxcare.7","9.1.13-tuxcare.8","9.1.13-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.15"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.10","9.1.13-tuxcare.11","9.1.13-tuxcare.12","9.1.13-tuxcare.13","9.1.13-tuxcare.14","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5","9.1.13-tuxcare.6","9.1.13-tuxcare.7","9.1.13-tuxcare.8","9.1.13-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.15"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.10","9.1.13-tuxcare.11","9.1.13-tuxcare.12","9.1.13-tuxcare.13","9.1.13-tuxcare.14","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5","9.1.13-tuxcare.6","9.1.13-tuxcare.7","9.1.13-tuxcare.8","9.1.13-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.15"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.10","9.1.13-tuxcare.11","9.1.13-tuxcare.12","9.1.13-tuxcare.13","9.1.13-tuxcare.14","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5","9.1.13-tuxcare.6","9.1.13-tuxcare.7","9.1.13-tuxcare.8","9.1.13-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.13-tuxcare.0"},{"fixed":"9.1.13-tuxcare.15"}]}],"versions":["9.1.13","9.1.13-tuxcare.1","9.1.13-tuxcare.10","9.1.13-tuxcare.11","9.1.13-tuxcare.12","9.1.13-tuxcare.13","9.1.13-tuxcare.14","9.1.13-tuxcare.2","9.1.13-tuxcare.3","9.1.13-tuxcare.4","9.1.13-tuxcare.5","9.1.13-tuxcare.6","9.1.13-tuxcare.7","9.1.13-tuxcare.8","9.1.13-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.6"}]}],"versions":["12.0.0","12.0.0-tuxcare.1","12.0.0-tuxcare.2","12.0.0-tuxcare.3","12.0.0-tuxcare.4","12.0.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.6"}]}],"versions":["12.0.0","12.0.0-tuxcare.1","12.0.0-tuxcare.2","12.0.0-tuxcare.3","12.0.0-tuxcare.4","12.0.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0-tuxcare.0"},{"fixed":"12.0.0-tuxcare.6"}]}],"versions":["12.0.0","12.0.0-tuxcare.1","12.0.0-tuxcare.2","12.0.0-tuxcare.3","12.0.0-tuxcare.4","12.0.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.6"}]}],"versions":["12.2.0","12.2.0-tuxcare.1","12.2.0-tuxcare.2","12.2.0-tuxcare.3","12.2.0-tuxcare.4","12.2.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.6"}]}],"versions":["12.2.0","12.2.0-tuxcare.1","12.2.0-tuxcare.2","12.2.0-tuxcare.3","12.2.0-tuxcare.4","12.2.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0-tuxcare.0"},{"fixed":"12.2.0-tuxcare.6"}]}],"versions":["12.2.0","12.2.0-tuxcare.1","12.2.0-tuxcare.2","12.2.0-tuxcare.3","12.2.0-tuxcare.4","12.2.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.6"}]}],"versions":["11.2.11","11.2.11-tuxcare.1","11.2.11-tuxcare.2","11.2.11-tuxcare.3","11.2.11-tuxcare.4","11.2.11-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.6"}]}],"versions":["11.2.11","11.2.11-tuxcare.1","11.2.11-tuxcare.2","11.2.11-tuxcare.3","11.2.11-tuxcare.4","11.2.11-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.11-tuxcare.0"},{"fixed":"11.2.11-tuxcare.6"}]}],"versions":["11.2.11","11.2.11-tuxcare.1","11.2.11-tuxcare.2","11.2.11-tuxcare.3","11.2.11-tuxcare.4","11.2.11-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.6"}]}],"versions":["12.2.16","12.2.16-tuxcare.1","12.2.16-tuxcare.2","12.2.16-tuxcare.3","12.2.16-tuxcare.4","12.2.16-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.6"}]}],"versions":["12.2.16","12.2.16-tuxcare.1","12.2.16-tuxcare.2","12.2.16-tuxcare.3","12.2.16-tuxcare.4","12.2.16-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.16-tuxcare.0"},{"fixed":"12.2.16-tuxcare.6"}]}],"versions":["12.2.16","12.2.16-tuxcare.1","12.2.16-tuxcare.2","12.2.16-tuxcare.3","12.2.16-tuxcare.4","12.2.16-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.11"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.10","13.4.0-tuxcare.2","13.4.0-tuxcare.3","13.4.0-tuxcare.4","13.4.0-tuxcare.5","13.4.0-tuxcare.6","13.4.0-tuxcare.7","13.4.0-tuxcare.8","13.4.0-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.11"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.10","13.4.0-tuxcare.2","13.4.0-tuxcare.3","13.4.0-tuxcare.4","13.4.0-tuxcare.5","13.4.0-tuxcare.6","13.4.0-tuxcare.7","13.4.0-tuxcare.8","13.4.0-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.4.0-tuxcare.0"},{"fixed":"13.4.0-tuxcare.11"}]}],"versions":["13.4.0","13.4.0-tuxcare.1","13.4.0-tuxcare.10","13.4.0-tuxcare.2","13.4.0-tuxcare.3","13.4.0-tuxcare.4","13.4.0-tuxcare.5","13.4.0-tuxcare.6","13.4.0-tuxcare.7","13.4.0-tuxcare.8","13.4.0-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.12"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.10","7.2.16-tuxcare.11","7.2.16-tuxcare.2","7.2.16-tuxcare.3","7.2.16-tuxcare.4","7.2.16-tuxcare.5","7.2.16-tuxcare.6","7.2.16-tuxcare.7","7.2.16-tuxcare.8","7.2.16-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.12"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.10","7.2.16-tuxcare.11","7.2.16-tuxcare.2","7.2.16-tuxcare.3","7.2.16-tuxcare.4","7.2.16-tuxcare.5","7.2.16-tuxcare.6","7.2.16-tuxcare.7","7.2.16-tuxcare.8","7.2.16-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.12"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.10","7.2.16-tuxcare.11","7.2.16-tuxcare.2","7.2.16-tuxcare.3","7.2.16-tuxcare.4","7.2.16-tuxcare.5","7.2.16-tuxcare.6","7.2.16-tuxcare.7","7.2.16-tuxcare.8","7.2.16-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.12"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.10","7.2.16-tuxcare.11","7.2.16-tuxcare.2","7.2.16-tuxcare.3","7.2.16-tuxcare.4","7.2.16-tuxcare.5","7.2.16-tuxcare.6","7.2.16-tuxcare.7","7.2.16-tuxcare.8","7.2.16-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.12"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.10","7.2.16-tuxcare.11","7.2.16-tuxcare.2","7.2.16-tuxcare.3","7.2.16-tuxcare.4","7.2.16-tuxcare.5","7.2.16-tuxcare.6","7.2.16-tuxcare.7","7.2.16-tuxcare.8","7.2.16-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.16-tuxcare.0"},{"fixed":"7.2.16-tuxcare.12"}]}],"versions":["7.2.16","7.2.16-tuxcare.1","7.2.16-tuxcare.10","7.2.16-tuxcare.11","7.2.16-tuxcare.2","7.2.16-tuxcare.3","7.2.16-tuxcare.4","7.2.16-tuxcare.5","7.2.16-tuxcare.6","7.2.16-tuxcare.7","7.2.16-tuxcare.8","7.2.16-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.6"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2","13.3.0-tuxcare.3","13.3.0-tuxcare.4","13.3.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.6"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2","13.3.0-tuxcare.3","13.3.0-tuxcare.4","13.3.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.0-tuxcare.0"},{"fixed":"13.3.0-tuxcare.6"}]}],"versions":["13.3.0","13.3.0-tuxcare.1","13.3.0-tuxcare.2","13.3.0-tuxcare.3","13.3.0-tuxcare.4","13.3.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.7-tuxcare.0"},{"fixed":"4.4.7-tuxcare.12"}]}],"versions":["4.4.7","4.4.7-tuxcare.1","4.4.7-tuxcare.10","4.4.7-tuxcare.11","4.4.7-tuxcare.2","4.4.7-tuxcare.3","4.4.7-tuxcare.4","4.4.7-tuxcare.5","4.4.7-tuxcare.6","4.4.7-tuxcare.7","4.4.7-tuxcare.8","4.4.7-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.7-tuxcare.0"},{"fixed":"4.4.7-tuxcare.12"}]}],"versions":["4.4.7","4.4.7-tuxcare.1","4.4.7-tuxcare.10","4.4.7-tuxcare.11","4.4.7-tuxcare.2","4.4.7-tuxcare.3","4.4.7-tuxcare.4","4.4.7-tuxcare.5","4.4.7-tuxcare.6","4.4.7-tuxcare.7","4.4.7-tuxcare.8","4.4.7-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.7-tuxcare.0"},{"fixed":"4.4.7-tuxcare.12"}]}],"versions":["4.4.7","4.4.7-tuxcare.1","4.4.7-tuxcare.10","4.4.7-tuxcare.11","4.4.7-tuxcare.2","4.4.7-tuxcare.3","4.4.7-tuxcare.4","4.4.7-tuxcare.5","4.4.7-tuxcare.6","4.4.7-tuxcare.7","4.4.7-tuxcare.8","4.4.7-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.7-tuxcare.0"},{"fixed":"4.4.7-tuxcare.12"}]}],"versions":["4.4.7","4.4.7-tuxcare.1","4.4.7-tuxcare.10","4.4.7-tuxcare.11","4.4.7-tuxcare.2","4.4.7-tuxcare.3","4.4.7-tuxcare.4","4.4.7-tuxcare.5","4.4.7-tuxcare.6","4.4.7-tuxcare.7","4.4.7-tuxcare.8","4.4.7-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.7-tuxcare.0"},{"fixed":"4.4.7-tuxcare.12"}]}],"versions":["4.4.7","4.4.7-tuxcare.1","4.4.7-tuxcare.10","4.4.7-tuxcare.11","4.4.7-tuxcare.2","4.4.7-tuxcare.3","4.4.7-tuxcare.4","4.4.7-tuxcare.5","4.4.7-tuxcare.6","4.4.7-tuxcare.7","4.4.7-tuxcare.8","4.4.7-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.7"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3","4.3.5-tuxcare.4","4.3.5-tuxcare.5","4.3.5-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.7"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3","4.3.5-tuxcare.4","4.3.5-tuxcare.5","4.3.5-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.7"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3","4.3.5-tuxcare.4","4.3.5-tuxcare.5","4.3.5-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.7"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3","4.3.5-tuxcare.4","4.3.5-tuxcare.5","4.3.5-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5-tuxcare.0"},{"fixed":"4.3.5-tuxcare.7"}]}],"versions":["4.3.5","4.3.5-tuxcare.1","4.3.5-tuxcare.2","4.3.5-tuxcare.3","4.3.5-tuxcare.4","4.3.5-tuxcare.5","4.3.5-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.5"}]}],"versions":["13.3.11","13.3.11-tuxcare.1","13.3.11-tuxcare.2","13.3.11-tuxcare.3","13.3.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.5"}]}],"versions":["13.3.11","13.3.11-tuxcare.1","13.3.11-tuxcare.2","13.3.11-tuxcare.3","13.3.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.11-tuxcare.0"},{"fixed":"13.3.11-tuxcare.5"}]}],"versions":["13.3.11","13.3.11-tuxcare.1","13.3.11-tuxcare.2","13.3.11-tuxcare.3","13.3.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.6"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2","13.3.12-tuxcare.3","13.3.12-tuxcare.4","13.3.12-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.6"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2","13.3.12-tuxcare.3","13.3.12-tuxcare.4","13.3.12-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.3.12-tuxcare.0"},{"fixed":"13.3.12-tuxcare.6"}]}],"versions":["13.3.12","13.3.12-tuxcare.1","13.3.12-tuxcare.2","13.3.12-tuxcare.3","13.3.12-tuxcare.4","13.3.12-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.12"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.10","14.3.0-tuxcare.11","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4","14.3.0-tuxcare.5","14.3.0-tuxcare.6","14.3.0-tuxcare.7","14.3.0-tuxcare.8","14.3.0-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.12"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.10","14.3.0-tuxcare.11","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4","14.3.0-tuxcare.5","14.3.0-tuxcare.6","14.3.0-tuxcare.7","14.3.0-tuxcare.8","14.3.0-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.3.0-tuxcare.0"},{"fixed":"14.3.0-tuxcare.12"}]}],"versions":["14.3.0","14.3.0-tuxcare.1","14.3.0-tuxcare.10","14.3.0-tuxcare.11","14.3.0-tuxcare.2","14.3.0-tuxcare.3","14.3.0-tuxcare.4","14.3.0-tuxcare.5","14.3.0-tuxcare.6","14.3.0-tuxcare.7","14.3.0-tuxcare.8","14.3.0-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.6"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2","14.2.8-tuxcare.3","14.2.8-tuxcare.4","14.2.8-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.6"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2","14.2.8-tuxcare.3","14.2.8-tuxcare.4","14.2.8-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.8-tuxcare.0"},{"fixed":"14.2.8-tuxcare.6"}]}],"versions":["14.2.8","14.2.8-tuxcare.1","14.2.8-tuxcare.2","14.2.8-tuxcare.3","14.2.8-tuxcare.4","14.2.8-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.6"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2","5.1.0-tuxcare.3","5.1.0-tuxcare.4","5.1.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.6"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2","5.1.0-tuxcare.3","5.1.0-tuxcare.4","5.1.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.6"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2","5.1.0-tuxcare.3","5.1.0-tuxcare.4","5.1.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.6"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2","5.1.0-tuxcare.3","5.1.0-tuxcare.4","5.1.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.6"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2","5.1.0-tuxcare.3","5.1.0-tuxcare.4","5.1.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-tuxcare.0"},{"fixed":"5.1.0-tuxcare.6"}]}],"versions":["5.1.0","5.1.0-tuxcare.1","5.1.0-tuxcare.2","5.1.0-tuxcare.3","5.1.0-tuxcare.4","5.1.0-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/elements","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/forms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-browser-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/service-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0-tuxcare.0"},{"fixed":"7.2.0-tuxcare.4"}]}],"versions":["7.2.0","7.2.0-tuxcare.1","7.2.0-tuxcare.2","7.2.0-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.5"}]}],"versions":["14.2.12","14.2.12-tuxcare.1","14.2.12-tuxcare.2","14.2.12-tuxcare.3","14.2.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.5"}]}],"versions":["14.2.12","14.2.12-tuxcare.1","14.2.12-tuxcare.2","14.2.12-tuxcare.3","14.2.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.12-tuxcare.0"},{"fixed":"14.2.12-tuxcare.5"}]}],"versions":["14.2.12","14.2.12-tuxcare.1","14.2.12-tuxcare.2","14.2.12-tuxcare.3","14.2.12-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.6"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2","5.1.2-tuxcare.3","5.1.2-tuxcare.4","5.1.2-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.6"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2","5.1.2-tuxcare.3","5.1.2-tuxcare.4","5.1.2-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.6"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2","5.1.2-tuxcare.3","5.1.2-tuxcare.4","5.1.2-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.6"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2","5.1.2-tuxcare.3","5.1.2-tuxcare.4","5.1.2-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.6"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2","5.1.2-tuxcare.3","5.1.2-tuxcare.4","5.1.2-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.2-tuxcare.0"},{"fixed":"5.1.2-tuxcare.6"}]}],"versions":["5.1.2","5.1.2-tuxcare.1","5.1.2-tuxcare.2","5.1.2-tuxcare.3","5.1.2-tuxcare.4","5.1.2-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.7"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3","5.2.7-tuxcare.4","5.2.7-tuxcare.5","5.2.7-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.7"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3","5.2.7-tuxcare.4","5.2.7-tuxcare.5","5.2.7-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.7"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3","5.2.7-tuxcare.4","5.2.7-tuxcare.5","5.2.7-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.7"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3","5.2.7-tuxcare.4","5.2.7-tuxcare.5","5.2.7-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.7"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3","5.2.7-tuxcare.4","5.2.7-tuxcare.5","5.2.7-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7-tuxcare.0"},{"fixed":"5.2.7-tuxcare.7"}]}],"versions":["5.2.7","5.2.7-tuxcare.1","5.2.7-tuxcare.2","5.2.7-tuxcare.3","5.2.7-tuxcare.4","5.2.7-tuxcare.5","5.2.7-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.13"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.10","6.1.10-tuxcare.11","6.1.10-tuxcare.12","6.1.10-tuxcare.2","6.1.10-tuxcare.3","6.1.10-tuxcare.4","6.1.10-tuxcare.5","6.1.10-tuxcare.6","6.1.10-tuxcare.7","6.1.10-tuxcare.8","6.1.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.13"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.10","6.1.10-tuxcare.11","6.1.10-tuxcare.12","6.1.10-tuxcare.2","6.1.10-tuxcare.3","6.1.10-tuxcare.4","6.1.10-tuxcare.5","6.1.10-tuxcare.6","6.1.10-tuxcare.7","6.1.10-tuxcare.8","6.1.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.13"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.10","6.1.10-tuxcare.11","6.1.10-tuxcare.12","6.1.10-tuxcare.2","6.1.10-tuxcare.3","6.1.10-tuxcare.4","6.1.10-tuxcare.5","6.1.10-tuxcare.6","6.1.10-tuxcare.7","6.1.10-tuxcare.8","6.1.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.13"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.10","6.1.10-tuxcare.11","6.1.10-tuxcare.12","6.1.10-tuxcare.2","6.1.10-tuxcare.3","6.1.10-tuxcare.4","6.1.10-tuxcare.5","6.1.10-tuxcare.6","6.1.10-tuxcare.7","6.1.10-tuxcare.8","6.1.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.13"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.10","6.1.10-tuxcare.11","6.1.10-tuxcare.12","6.1.10-tuxcare.2","6.1.10-tuxcare.3","6.1.10-tuxcare.4","6.1.10-tuxcare.5","6.1.10-tuxcare.6","6.1.10-tuxcare.7","6.1.10-tuxcare.8","6.1.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.10-tuxcare.0"},{"fixed":"6.1.10-tuxcare.13"}]}],"versions":["6.1.10","6.1.10-tuxcare.1","6.1.10-tuxcare.10","6.1.10-tuxcare.11","6.1.10-tuxcare.12","6.1.10-tuxcare.2","6.1.10-tuxcare.3","6.1.10-tuxcare.4","6.1.10-tuxcare.5","6.1.10-tuxcare.6","6.1.10-tuxcare.7","6.1.10-tuxcare.8","6.1.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.6-tuxcare.0"},{"fixed":"15.2.6-tuxcare.5"}]}],"versions":["15.2.6","15.2.6-tuxcare.1","15.2.6-tuxcare.2","15.2.6-tuxcare.3","15.2.6-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.6-tuxcare.0"},{"fixed":"15.2.6-tuxcare.5"}]}],"versions":["15.2.6","15.2.6-tuxcare.1","15.2.6-tuxcare.2","15.2.6-tuxcare.3","15.2.6-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.6-tuxcare.0"},{"fixed":"15.2.6-tuxcare.5"}]}],"versions":["15.2.6","15.2.6-tuxcare.1","15.2.6-tuxcare.2","15.2.6-tuxcare.3","15.2.6-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.6"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3","6.0.1-tuxcare.4","6.0.1-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.6"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3","6.0.1-tuxcare.4","6.0.1-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.6"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3","6.0.1-tuxcare.4","6.0.1-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.6"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3","6.0.1-tuxcare.4","6.0.1-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.6"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3","6.0.1-tuxcare.4","6.0.1-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.1-tuxcare.0"},{"fixed":"6.0.1-tuxcare.6"}]}],"versions":["6.0.1","6.0.1-tuxcare.1","6.0.1-tuxcare.2","6.0.1-tuxcare.3","6.0.1-tuxcare.4","6.0.1-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.14"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.10","15.2.10-tuxcare.11","15.2.10-tuxcare.12","15.2.10-tuxcare.13","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4","15.2.10-tuxcare.5","15.2.10-tuxcare.6","15.2.10-tuxcare.7","15.2.10-tuxcare.8","15.2.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.14"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.10","15.2.10-tuxcare.11","15.2.10-tuxcare.12","15.2.10-tuxcare.13","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4","15.2.10-tuxcare.5","15.2.10-tuxcare.6","15.2.10-tuxcare.7","15.2.10-tuxcare.8","15.2.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.10-tuxcare.0"},{"fixed":"15.2.10-tuxcare.14"}]}],"versions":["15.2.10","15.2.10-tuxcare.1","15.2.10-tuxcare.10","15.2.10-tuxcare.11","15.2.10-tuxcare.12","15.2.10-tuxcare.13","15.2.10-tuxcare.2","15.2.10-tuxcare.3","15.2.10-tuxcare.4","15.2.10-tuxcare.5","15.2.10-tuxcare.6","15.2.10-tuxcare.7","15.2.10-tuxcare.8","15.2.10-tuxcare.9"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.6"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2","15.0.3-tuxcare.3","15.0.3-tuxcare.4","15.0.3-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.6"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2","15.0.3-tuxcare.3","15.0.3-tuxcare.4","15.0.3-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.3-tuxcare.0"},{"fixed":"15.0.3-tuxcare.6"}]}],"versions":["15.0.3","15.0.3-tuxcare.1","15.0.3-tuxcare.2","15.0.3-tuxcare.3","15.0.3-tuxcare.4","15.0.3-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.4"}]}],"versions":["15.2.1","15.2.1-tuxcare.1","15.2.1-tuxcare.2","15.2.1-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.4"}]}],"versions":["15.2.1","15.2.1-tuxcare.1","15.2.1-tuxcare.2","15.2.1-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.1-tuxcare.0"},{"fixed":"15.2.1-tuxcare.4"}]}],"versions":["15.2.1","15.2.1-tuxcare.1","15.2.1-tuxcare.2","15.2.1-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.5"}]}],"versions":["15.2.2","15.2.2-tuxcare.1","15.2.2-tuxcare.2","15.2.2-tuxcare.3","15.2.2-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.5"}]}],"versions":["15.2.2","15.2.2-tuxcare.1","15.2.2-tuxcare.2","15.2.2-tuxcare.3","15.2.2-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.2-tuxcare.0"},{"fixed":"15.2.2-tuxcare.5"}]}],"versions":["15.2.2","15.2.2-tuxcare.1","15.2.2-tuxcare.2","15.2.2-tuxcare.3","15.2.2-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.5"}]}],"versions":["16.2.7","16.2.7-tuxcare.1","16.2.7-tuxcare.2","16.2.7-tuxcare.3","16.2.7-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.5"}]}],"versions":["16.2.7","16.2.7-tuxcare.1","16.2.7-tuxcare.2","16.2.7-tuxcare.3","16.2.7-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.7-tuxcare.0"},{"fixed":"16.2.7-tuxcare.5"}]}],"versions":["16.2.7","16.2.7-tuxcare.1","16.2.7-tuxcare.2","16.2.7-tuxcare.3","16.2.7-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.4"}]}],"versions":["16.2.11","16.2.11-tuxcare.1","16.2.11-tuxcare.2","16.2.11-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.4"}]}],"versions":["16.2.11","16.2.11-tuxcare.1","16.2.11-tuxcare.2","16.2.11-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.11-tuxcare.0"},{"fixed":"16.2.11-tuxcare.4"}]}],"versions":["16.2.11","16.2.11-tuxcare.1","16.2.11-tuxcare.2","16.2.11-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.14"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.10","16.2.12-tuxcare.11","16.2.12-tuxcare.12","16.2.12-tuxcare.13","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5","16.2.12-tuxcare.6","16.2.12-tuxcare.7","16.2.12-tuxcare.8","16.2.12-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.14"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.10","16.2.12-tuxcare.11","16.2.12-tuxcare.12","16.2.12-tuxcare.13","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5","16.2.12-tuxcare.6","16.2.12-tuxcare.7","16.2.12-tuxcare.8","16.2.12-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.2.12-tuxcare.0"},{"fixed":"16.2.12-tuxcare.14"}]}],"versions":["16.2.12","16.2.12-tuxcare.1","16.2.12-tuxcare.10","16.2.12-tuxcare.11","16.2.12-tuxcare.12","16.2.12-tuxcare.13","16.2.12-tuxcare.2","16.2.12-tuxcare.3","16.2.12-tuxcare.4","16.2.12-tuxcare.5","16.2.12-tuxcare.6","16.2.12-tuxcare.7","16.2.12-tuxcare.8","16.2.12-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.6"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2","18.1.2-tuxcare.3","18.1.2-tuxcare.4","18.1.2-tuxcare.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.6"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2","18.1.2-tuxcare.3","18.1.2-tuxcare.4","18.1.2-tuxcare.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.1.2-tuxcare.0"},{"fixed":"18.1.2-tuxcare.6"}]}],"versions":["18.1.2","18.1.2-tuxcare.1","18.1.2-tuxcare.2","18.1.2-tuxcare.3","18.1.2-tuxcare.4","18.1.2-tuxcare.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.6"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2","18.2.12-tuxcare.3","18.2.12-tuxcare.4","18.2.12-tuxcare.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.6"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2","18.2.12-tuxcare.3","18.2.12-tuxcare.4","18.2.12-tuxcare.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.12-tuxcare.0"},{"fixed":"18.2.12-tuxcare.6"}]}],"versions":["18.2.12","18.2.12-tuxcare.1","18.2.12-tuxcare.2","18.2.12-tuxcare.3","18.2.12-tuxcare.4","18.2.12-tuxcare.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.16"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.10","17.3.12-tuxcare.11","17.3.12-tuxcare.12","17.3.12-tuxcare.13","17.3.12-tuxcare.14","17.3.12-tuxcare.15","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4","17.3.12-tuxcare.5","17.3.12-tuxcare.6","17.3.12-tuxcare.7","17.3.12-tuxcare.8","17.3.12-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.16"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.10","17.3.12-tuxcare.11","17.3.12-tuxcare.12","17.3.12-tuxcare.13","17.3.12-tuxcare.14","17.3.12-tuxcare.15","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4","17.3.12-tuxcare.5","17.3.12-tuxcare.6","17.3.12-tuxcare.7","17.3.12-tuxcare.8","17.3.12-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.3.12-tuxcare.0"},{"fixed":"17.3.12-tuxcare.16"}]}],"versions":["17.3.12","17.3.12-tuxcare.1","17.3.12-tuxcare.10","17.3.12-tuxcare.11","17.3.12-tuxcare.12","17.3.12-tuxcare.13","17.3.12-tuxcare.14","17.3.12-tuxcare.15","17.3.12-tuxcare.2","17.3.12-tuxcare.3","17.3.12-tuxcare.4","17.3.12-tuxcare.5","17.3.12-tuxcare.6","17.3.12-tuxcare.7","17.3.12-tuxcare.8","17.3.12-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.15"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.10","18.2.14-tuxcare.11","18.2.14-tuxcare.12","18.2.14-tuxcare.13","18.2.14-tuxcare.14","18.2.14-tuxcare.2","18.2.14-tuxcare.3","18.2.14-tuxcare.4","18.2.14-tuxcare.5","18.2.14-tuxcare.6","18.2.14-tuxcare.7","18.2.14-tuxcare.8","18.2.14-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.15"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.10","18.2.14-tuxcare.11","18.2.14-tuxcare.12","18.2.14-tuxcare.13","18.2.14-tuxcare.14","18.2.14-tuxcare.2","18.2.14-tuxcare.3","18.2.14-tuxcare.4","18.2.14-tuxcare.5","18.2.14-tuxcare.6","18.2.14-tuxcare.7","18.2.14-tuxcare.8","18.2.14-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.2.14-tuxcare.0"},{"fixed":"18.2.14-tuxcare.15"}]}],"versions":["18.2.14","18.2.14-tuxcare.1","18.2.14-tuxcare.10","18.2.14-tuxcare.11","18.2.14-tuxcare.12","18.2.14-tuxcare.13","18.2.14-tuxcare.14","18.2.14-tuxcare.2","18.2.14-tuxcare.3","18.2.14-tuxcare.4","18.2.14-tuxcare.5","18.2.14-tuxcare.6","18.2.14-tuxcare.7","18.2.14-tuxcare.8","18.2.14-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.5"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2","7.2.1-tuxcare.3","7.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.5"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2","7.2.1-tuxcare.3","7.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.5"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2","7.2.1-tuxcare.3","7.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.5"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2","7.2.1-tuxcare.3","7.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.5"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2","7.2.1-tuxcare.3","7.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.1-tuxcare.0"},{"fixed":"7.2.1-tuxcare.5"}]}],"versions":["7.2.1","7.2.1-tuxcare.1","7.2.1-tuxcare.2","7.2.1-tuxcare.3","7.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.5"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2","7.2.11-tuxcare.3","7.2.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.5"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2","7.2.11-tuxcare.3","7.2.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.5"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2","7.2.11-tuxcare.3","7.2.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.5"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2","7.2.11-tuxcare.3","7.2.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.5"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2","7.2.11-tuxcare.3","7.2.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-webworker-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.2.11-tuxcare.0"},{"fixed":"7.2.11-tuxcare.5"}]}],"versions":["7.2.11","7.2.11-tuxcare.1","7.2.11-tuxcare.2","7.2.11-tuxcare.3","7.2.11-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.21-tuxcare.0"},{"fixed":"19.2.21-tuxcare.7"}]}],"versions":["19.2.21","19.2.21-tuxcare.2","19.2.21-tuxcare.4","19.2.21-tuxcare.5","19.2.21-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.21-tuxcare.0"},{"fixed":"19.2.21-tuxcare.7"}]}],"versions":["19.2.21","19.2.21-tuxcare.2","19.2.21-tuxcare.4","19.2.21-tuxcare.5","19.2.21-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.21-tuxcare.0"},{"fixed":"19.2.21-tuxcare.7"}]}],"versions":["19.2.21","19.2.21-tuxcare.2","19.2.21-tuxcare.4","19.2.21-tuxcare.5","19.2.21-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/bazel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.23-tuxcare.0"},{"fixed":"19.2.23-tuxcare.5"}]}],"versions":["19.2.23","19.2.23-tuxcare.1","19.2.23-tuxcare.2","19.2.23-tuxcare.3","19.2.23-tuxcare.4"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/benchpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.23-tuxcare.0"},{"fixed":"19.2.23-tuxcare.5"}]}],"versions":["19.2.23","19.2.23-tuxcare.1","19.2.23-tuxcare.2","19.2.23-tuxcare.3","19.2.23-tuxcare.4"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.23-tuxcare.0"},{"fixed":"19.2.23-tuxcare.5"}]}],"versions":["19.2.23","19.2.23-tuxcare.1","19.2.23-tuxcare.2","19.2.23-tuxcare.3","19.2.23-tuxcare.4"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/elements","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/forms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/localize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-browser-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/service-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.18-tuxcare.0"},{"fixed":"19.2.18-tuxcare.1"}]}],"versions":["19.2.18"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/compiler-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/elements","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/forms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/language-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/localize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-browser-dynamic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"@angular/platform-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.2.14-tuxcare.0"},{"fixed":"19.2.14-tuxcare.1"}]}],"versions":["19.2.14"],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-1","1.8.3-1+deb12u1","1.8.3-1+deb12u1~deb11u1","1.8.3-2","1.8.3-3"]},{"source":"osv","ecosystem":"Debian:13","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]},{"source":"osv","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"SEMVER","events":[{"introduced":"22.0.0"},{"fixed":"22.1.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"SEMVER","events":[{"introduced":"21.0.0"},{"fixed":"21.2.22"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"SEMVER","events":[{"introduced":"20.0.0"},{"fixed":"20.3.30"}]}]},{"source":"osv","ecosystem":"npm","package":"@angular/platform-server","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"19.2.25"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.28-1ubuntu2","1.2.28-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.10-1","1.5.10-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.10-1","1.7.9-1","1.7.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.2-2","1.8.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-1","1.8.3-1ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"angular.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-3"]}],"affected_more":626,"products":[{"vendor":"angular","product":"angular"}],"references":[{"url":"https://github.com/angular/angular/security/advisories/GHSA-j3r3-mxqp-r2p4","tags":["x_refsource_CONFIRM","exploit","Exploit","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/angular/angular/issues/70146","tags":["x_refsource_MISC","exploit","Issue Tracking","Patch","report","web"]},{"url":"https://github.com/angular/angular/commit/73d8bbd27cb46495426d4132975a1355b47ad915","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/angular/angular/commit/89b20568dfaee1ec8e0b3bcf1872acdddd2f4fef","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/angular/angular/commit/ba3bc47b20b3d12f5eb141ec9c651373ae4d15e8","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/angular/domino/commit/04f987dc08ff3736b427f50941adf1722458528f","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/angular/angular/releases/tag/v20.3.30","tags":["x_refsource_MISC","Release Notes","web"]},{"url":"https://github.com/angular/angular/releases/tag/v21.2.22","tags":["x_refsource_MISC","Release Notes","web"]},{"url":"https://github.com/angular/angular/releases/tag/v22.1.4","tags":["x_refsource_MISC","Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88058","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j3r3-mxqp-r2p4"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88058.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-88058","tags":["advisory"]},{"url":"https://github.com/angular/angular","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2026-88058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-88058","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-88058","title":"Angular: SSR XSS via Unescaped Processing Instruction (\u003c?...?\u003e) Nodes in Fallback Raw-Content Elements","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","status":"published","published":"2026-09-10T18:56:03.369Z","modified":"2026-09-11T15:14:37.967Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-79","CWE-116"],"updated_at":"2026-11-02T13:42:04.39372Z"}],"euvd":[{"id":"EUVD-2026-75681","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","status":"published","published":"2026-09-10T18:56:03Z","modified":"2026-09-11T15:14:37Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:28:22.567961Z"}],"ghsa":[{"id":"GHSA-j3r3-mxqp-r2p4","title":"Angular SSR: XSS via Unescaped Processing Instruction (\u003c?...?\u003e) Nodes in Fallback Raw-Content Elements","description":"### Summary\nAn XSS vulnerability exists in `@angular/platform-server` during server-side rendering (SSR) HTML serialization of `ProcessingInstruction` DOM nodes (`\u003c?target data?\u003e`, `nodeType === 7`) when nested inside fallback raw-content elements (`\u003cnoscript\u003e`, `\u003ciframe\u003e`, `\u003cnoembed\u003e`, `\u003cnoframes\u003e`). While processing instruction data escaped `\u003e` to `\u0026gt;`, it did not check for or escape matching closing tags of ancestor fallback elements (e.g., `\u003c/noscript\u003e`). When rendered in a browser with scripting enabled, an unescaped closing tag sequence in a processing instruction prematurely closes the fallback raw-content tag and causes subsequent sibling elements to execute as live HTML.\n\n### Technical Description\nIn HTML5 parsing, fallback raw-content elements (`\u003cnoscript\u003e`, `\u003ciframe\u003e`, `\u003cnoembed\u003e`, `\u003cnoframes\u003e`) place the browser's HTML tokenizer into `RAWTEXT` mode. In `RAWTEXT` mode, processing instruction tokens (`\u003c?...?\u003e`) are treated as literal raw text rather than bogus comments, and the parser ignores `\u003e` or `?\u003e`. The only token sequence that terminates the container is an end tag matching the container tag name (`\u003c/noscript`, `\u003c/iframe`, etc.).\n\nDuring server-side HTML serialization, processing instruction nodes previously only replaced `\u003e` with `\u0026gt;` (preventing bogus comment breakouts in normal HTML data states) but left `\u003c` untouched. Crucially, processing instruction serialization never inspected ancestor fallback raw-content tags. As a result, if a `ProcessingInstruction` node inside `\u003cnoscript\u003e` contained `\u003c/noscript ` in its data payload, it was emitted unescaped as `\u003c?x \u003c/noscript ?\u003e`.\n\n### Impact \u0026 Reachability\n* **Reachability**: Processing instruction nodes cannot be authored directly through standard Angular template syntax (which parses `\u003c?...\u003e` into comment nodes in DOM position). Reaching this vulnerability requires application or library code calling `inject(DOCUMENT).createProcessingInstruction(target, data)` or `Renderer2` DOM insertion methods with untrusted user input passed to `data` inside a fallback raw-content container.\n* **Impact**: In applications that programmatically construct processing instruction nodes inside fallback elements during server-side rendering, an attacker controlling the processing instruction data can break out of the container and execute arbitrary JavaScript in victims' browsers.\n\n### Proof of Concept (Minimal Reproduction)\n```ts\nimport { Component, ElementRef, Renderer2, inject, DOCUMENT, AfterViewInit } from '@angular/core';\n\n@Component({\n  selector: 'app-root',\n  standalone: true,\n  template: `\u003cnoscript id=\"host\"\u003e\u003c/noscript\u003e`\n})\nexport class AppComponent implements AfterViewInit {\n  private r = inject(Renderer2);\n  private el = inject(ElementRef);\n  private doc = inject(DOCUMENT);\n\n  ngAfterViewInit() {\n    const host = this.el.nativeElement.querySelector('#host');\n    \n    // Attacker-controlled input passed as Processing Instruction data\n    const pi = this.doc.createProcessingInstruction('x', '\u003c/noscript ');\n    this.r.appendChild(host, pi);\n    \n    // Sibling markup that should remain inert inside \u003cnoscript\u003e\n    const img = this.r.createElement('img');\n    this.r.setAttribute(img, 'src', 'x');\n    this.r.setAttribute(img, 'onerror', 'alert(\"SSR_PI_XSS\")');\n    this.r.appendChild(host, img);\n  }\n}\n```\n**Vulnerable SSR Output**:\n```html\n\u003cnoscript\u003e\u003c?x \u003c/noscript ?\u003e\u003cimg src=\"x\" onerror=\"alert('SSR_PI_XSS')\"\u003e\u003c/noscript\u003e\n```\n\n### Workarounds\n* Avoid passing untrusted user input into `document.createProcessingInstruction(target, data)` when the node is inserted into `\u003cnoscript\u003e`, `\u003ciframe\u003e`, `\u003cnoembed\u003e`, or `\u003cnoframes\u003e` during server-side rendering.\n* Manually sanitize or replace `\u003c` with `\u0026lt;` in any untrusted data passed to processing instruction nodes on the server.","status":"published","published":"2026-09-28T20:39:26Z","modified":"2026-09-28T20:40:09Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-79","CWE-116"],"updated_at":"2026-11-02T14:41:22.654187Z"}],"nvd":[{"id":"CVE-2026-88058","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","status":"published","published":"2026-09-10T19:17:41.8Z","modified":"2026-09-29T19:01:24.747Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79","CWE-116"],"updated_at":"2026-11-02T14:12:46.271848Z"}],"osv":[{"id":"CVE-2026-88058","title":"Angular: SSR XSS via Unescaped Processing Instruction (\u003c?...?\u003e) Nodes in Fallback Raw-Content Elements","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","status":"published","published":"2026-09-10T18:56:03.369Z","modified":"2026-10-28T02:30:49.788208465Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-116","CWE-79"],"updated_at":"2026-11-02T15:45:19.210277Z"},{"id":"DEBIAN-CVE-2026-88058","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","status":"published","published":"2026-09-10T19:17:41.8Z","modified":"2026-09-30T09:00:21.665736132Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"GHSA-j3r3-mxqp-r2p4","title":"Angular SSR: XSS via Unescaped Processing Instruction (\u003c?...?\u003e) Nodes in Fallback Raw-Content Elements","description":"### Summary\nAn XSS vulnerability exists in `@angular/platform-server` during server-side rendering (SSR) HTML serialization of `ProcessingInstruction` DOM nodes (`\u003c?target data?\u003e`, `nodeType === 7`) when nested inside fallback raw-content elements (`\u003cnoscript\u003e`, `\u003ciframe\u003e`, `\u003cnoembed\u003e`, `\u003cnoframes\u003e`). While processing instruction data escaped `\u003e` to `\u0026gt;`, it did not check for or escape matching closing tags of ancestor fallback elements (e.g., `\u003c/noscript\u003e`). When rendered in a browser with scripting enabled, an unescaped closing tag sequence in a processing instruction prematurely closes the fallback raw-content tag and causes subsequent sibling elements to execute as live HTML.\n\n### Technical Description\nIn HTML5 parsing, fallback raw-content elements (`\u003cnoscript\u003e`, `\u003ciframe\u003e`, `\u003cnoembed\u003e`, `\u003cnoframes\u003e`) place the browser's HTML tokenizer into `RAWTEXT` mode. In `RAWTEXT` mode, processing instruction tokens (`\u003c?...?\u003e`) are treated as literal raw text rather than bogus comments, and the parser ignores `\u003e` or `?\u003e`. The only token sequence that terminates the container is an end tag matching the container tag name (`\u003c/noscript`, `\u003c/iframe`, etc.).\n\nDuring server-side HTML serialization, processing instruction nodes previously only replaced `\u003e` with `\u0026gt;` (preventing bogus comment breakouts in normal HTML data states) but left `\u003c` untouched. Crucially, processing instruction serialization never inspected ancestor fallback raw-content tags. As a result, if a `ProcessingInstruction` node inside `\u003cnoscript\u003e` contained `\u003c/noscript ` in its data payload, it was emitted unescaped as `\u003c?x \u003c/noscript ?\u003e`.\n\n### Impact \u0026 Reachability\n* **Reachability**: Processing instruction nodes cannot be authored directly through standard Angular template syntax (which parses `\u003c?...\u003e` into comment nodes in DOM position). Reaching this vulnerability requires application or library code calling `inject(DOCUMENT).createProcessingInstruction(target, data)` or `Renderer2` DOM insertion methods with untrusted user input passed to `data` inside a fallback raw-content container.\n* **Impact**: In applications that programmatically construct processing instruction nodes inside fallback elements during server-side rendering, an attacker controlling the processing instruction data can break out of the container and execute arbitrary JavaScript in victims' browsers.\n\n### Proof of Concept (Minimal Reproduction)\n```ts\nimport { Component, ElementRef, Renderer2, inject, DOCUMENT, AfterViewInit } from '@angular/core';\n\n@Component({\n  selector: 'app-root',\n  standalone: true,\n  template: `\u003cnoscript id=\"host\"\u003e\u003c/noscript\u003e`\n})\nexport class AppComponent implements AfterViewInit {\n  private r = inject(Renderer2);\n  private el = inject(ElementRef);\n  private doc = inject(DOCUMENT);\n\n  ngAfterViewInit() {\n    const host = this.el.nativeElement.querySelector('#host');\n    \n    // Attacker-controlled input passed as Processing Instruction data\n    const pi = this.doc.createProcessingInstruction('x', '\u003c/noscript ');\n    this.r.appendChild(host, pi);\n    \n    // Sibling markup that should remain inert inside \u003cnoscript\u003e\n    const img = this.r.createElement('img');\n    this.r.setAttribute(img, 'src', 'x');\n    this.r.setAttribute(img, 'onerror', 'alert(\"SSR_PI_XSS\")');\n    this.r.appendChild(host, img);\n  }\n}\n```\n**Vulnerable SSR Output**:\n```html\n\u003cnoscript\u003e\u003c?x \u003c/noscript ?\u003e\u003cimg src=\"x\" onerror=\"alert('SSR_PI_XSS')\"\u003e\u003c/noscript\u003e\n```\n\n### Workarounds\n* Avoid passing untrusted user input into `document.createProcessingInstruction(target, data)` when the node is inserted into `\u003cnoscript\u003e`, `\u003ciframe\u003e`, `\u003cnoembed\u003e`, or `\u003cnoframes\u003e` during server-side rendering.\n* Manually sanitize or replace `\u003c` with `\u0026lt;` in any untrusted data passed to processing instruction nodes on the server.","status":"published","published":"2026-09-28T20:39:26Z","modified":"2026-09-28T20:45:04.134330777Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-116","CWE-79"],"updated_at":"2026-11-02T15:46:49.977351Z"},{"id":"UBUNTU-CVE-2026-88058","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback raw-content elements without escaping matching ancestor closing tags. ProcessingInstruction data escaped greater-than characters but left less-than characters untouched and did not inspect fallback ancestors, so data such as a matching closing tag prematurely terminates noscript, iframe, noembed, or noframes containers. The vulnerable nodes cannot be authored through standard Angular templates; reachability requires application or library code using inject(DOCUMENT).createProcessingInstruction with attacker-controlled data or Renderer2 DOM insertion inside a fallback container. In HTML5 RAWTEXT parsing, the premature close causes subsequent sibling elements to be interpreted as live HTML and enables arbitrary JavaScript execution in a victim's browser. This issue is fixed in versions 20.3.30, 21.2.22, and 22.1.4.","status":"published","published":"2026-09-10T19:17:00Z","modified":"2026-10-17T13:01:15.501597206Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:57:24.828975Z"},{"id":"CLSA-2026-1790430327","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 5 @angular packages to address 2 CVEs. Fixed in 10.2.5-tuxcare.12.","status":"published","published":"2026-09-26T13:45:27Z","modified":"2026-11-02T19:58:38.819449889Z","updated_at":"2026-11-02T20:23:16.654089Z"},{"id":"CLSA-2026-1790430437","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 11.2.0-tuxcare.6.","status":"published","published":"2026-09-26T13:47:17Z","modified":"2026-11-02T19:58:33.886070624Z","updated_at":"2026-11-02T20:23:44.164659Z"},{"id":"CLSA-2026-1790431371","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 8.0.0-tuxcare.5.","status":"published","published":"2026-09-26T14:02:51Z","modified":"2026-11-02T19:58:43.547075277Z","updated_at":"2026-11-02T20:22:47.555648Z"},{"id":"CLSA-2026-1790431555","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 8.2.14-tuxcare.13.","status":"published","published":"2026-09-26T14:05:55Z","modified":"2026-11-02T19:58:51.173213446Z","updated_at":"2026-11-02T20:22:11.1598Z"},{"id":"CLSA-2026-1790431638","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 9.1.13-tuxcare.15.","status":"published","published":"2026-09-26T14:07:18Z","modified":"2026-11-02T19:58:25.678403579Z","updated_at":"2026-11-02T20:24:04.539092Z"},{"id":"CLSA-2026-1790444143","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 12.0.0-tuxcare.6.","status":"published","published":"2026-09-26T17:35:43Z","modified":"2026-11-02T19:59:02.259982403Z","updated_at":"2026-11-02T20:21:23.736144Z"},{"id":"CLSA-2026-1790444330","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 12.2.0-tuxcare.6.","status":"published","published":"2026-09-26T17:38:50Z","modified":"2026-11-02T19:59:14.797602247Z","updated_at":"2026-11-02T20:20:19.355696Z"},{"id":"CLSA-2026-1790444584","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 11.2.11-tuxcare.6.","status":"published","published":"2026-09-26T17:43:04Z","modified":"2026-11-02T19:58:28.172659947Z","updated_at":"2026-11-02T20:23:55.577236Z"},{"id":"CLSA-2026-1790445273","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 12.2.16-tuxcare.6.","status":"published","published":"2026-09-26T17:54:33Z","modified":"2026-11-02T19:58:39.447334809Z","updated_at":"2026-11-02T20:23:06.991677Z"},{"id":"CLSA-2026-1790450474","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 13.4.0-tuxcare.11.","status":"published","published":"2026-09-26T19:21:14Z","modified":"2026-11-02T19:59:07.908149899Z","updated_at":"2026-11-02T20:20:54.36149Z"},{"id":"CLSA-2026-1790450789","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 7.2.16-tuxcare.12.","status":"published","published":"2026-09-26T19:26:29Z","modified":"2026-10-19T07:45:31.704646652Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790451381","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 13.3.0-tuxcare.6.","status":"published","published":"2026-09-26T19:36:21Z","modified":"2026-11-02T19:58:48.946313345Z","updated_at":"2026-11-02T20:22:21.718834Z"},{"id":"CLSA-2026-1790453017","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 5 @angular packages to address 2 CVEs. Fixed in 4.4.7-tuxcare.12.","status":"published","published":"2026-09-26T20:03:37Z","modified":"2026-10-19T07:45:41.358723617Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790453168","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 5 @angular packages to address 2 CVEs. Fixed in 4.3.5-tuxcare.7.","status":"published","published":"2026-09-26T20:06:08Z","modified":"2026-11-02T19:59:02.634706872Z","updated_at":"2026-11-02T20:21:23.736144Z"},{"id":"CLSA-2026-1790453821","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 13.3.11-tuxcare.5.","status":"published","published":"2026-09-26T20:17:01Z","modified":"2026-11-02T19:58:56.763484941Z","updated_at":"2026-11-02T20:21:43.894482Z"},{"id":"CLSA-2026-1790454526","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 13.3.12-tuxcare.6.","status":"published","published":"2026-09-26T20:28:46Z","modified":"2026-11-02T19:58:38.94347881Z","updated_at":"2026-11-02T20:23:16.654089Z"},{"id":"CLSA-2026-1790456135","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 14.3.0-tuxcare.12.","status":"published","published":"2026-09-26T20:55:35Z","modified":"2026-11-02T19:59:00.841467893Z","updated_at":"2026-11-02T20:21:30.928169Z"},{"id":"CLSA-2026-1790459428","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 14.2.8-tuxcare.6.","status":"published","published":"2026-09-26T21:50:28Z","modified":"2026-11-02T19:58:38.233900166Z","updated_at":"2026-11-02T20:23:16.654089Z"},{"id":"CLSA-2026-1790460862","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 5.1.0-tuxcare.6.","status":"published","published":"2026-09-26T22:14:22Z","modified":"2026-11-02T19:59:01.476964589Z","updated_at":"2026-11-02T20:21:30.928169Z"},{"id":"CLSA-2026-1790461484","title":"TuxCare security update for @angular (3 CVEs)","description":"TuxCare rebuilt 17 @angular packages to address 3 CVEs. Fixed in 7.2.0-tuxcare.4.","status":"published","published":"2026-09-26T22:24:44Z","modified":"2026-10-16T16:30:42.710432706Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790461516","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 14.2.12-tuxcare.5.","status":"published","published":"2026-09-26T22:25:16Z","modified":"2026-11-02T19:58:40.421488655Z","updated_at":"2026-11-02T20:23:03.020323Z"},{"id":"CLSA-2026-1790461536","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 5.1.2-tuxcare.6.","status":"published","published":"2026-09-26T22:25:36Z","modified":"2026-11-02T19:59:13.109121245Z","updated_at":"2026-11-02T20:20:31.028327Z"},{"id":"CLSA-2026-1790464577","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.7.","status":"published","published":"2026-09-26T23:16:17Z","modified":"2026-10-19T07:45:41.708229364Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790465478","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.13.","status":"published","published":"2026-09-26T23:31:18Z","modified":"2026-11-02T19:58:49.215054487Z","updated_at":"2026-11-02T20:22:21.718834Z"},{"id":"CLSA-2026-1790465987","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.2.6-tuxcare.5.","status":"published","published":"2026-09-26T23:39:47Z","modified":"2026-11-02T19:58:48.67266044Z","updated_at":"2026-11-02T20:22:25.675551Z"},{"id":"CLSA-2026-1790466289","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 6.0.1-tuxcare.6.","status":"published","published":"2026-09-26T23:44:49Z","modified":"2026-11-02T19:58:34.617188254Z","updated_at":"2026-11-02T20:23:27.713928Z"},{"id":"CLSA-2026-1790469745","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.2.10-tuxcare.14.","status":"published","published":"2026-09-27T00:42:25Z","modified":"2026-11-02T19:59:11.099106617Z","updated_at":"2026-11-02T20:20:38.202286Z"},{"id":"CLSA-2026-1790469964","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.0.3-tuxcare.6.","status":"published","published":"2026-09-27T00:46:04Z","modified":"2026-11-02T19:58:50.491525786Z","updated_at":"2026-11-02T20:22:14.488146Z"},{"id":"CLSA-2026-1790470455","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.2.1-tuxcare.4.","status":"published","published":"2026-09-27T00:54:15Z","modified":"2026-11-02T19:59:00.757679706Z","updated_at":"2026-11-02T20:21:30.928169Z"},{"id":"CLSA-2026-1790471349","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.2.2-tuxcare.5.","status":"published","published":"2026-09-27T01:09:09Z","modified":"2026-11-02T19:59:17.303571544Z","updated_at":"2026-11-02T20:20:05.241925Z"},{"id":"CLSA-2026-1790474705","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 16.2.7-tuxcare.5.","status":"published","published":"2026-09-27T02:05:05Z","modified":"2026-10-19T07:45:25.35600628Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790475892","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 16.2.11-tuxcare.4.","status":"published","published":"2026-09-27T02:24:52Z","modified":"2026-10-19T07:45:19.734179119Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790476096","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 16.2.12-tuxcare.14.","status":"published","published":"2026-09-27T02:28:16Z","modified":"2026-10-19T07:45:18.59525371Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790477222","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 18.1.2-tuxcare.6.","status":"published","published":"2026-09-27T02:47:02Z","modified":"2026-10-19T07:45:25.347406045Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790477639","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 18.2.12-tuxcare.6.","status":"published","published":"2026-09-27T02:53:59Z","modified":"2026-10-19T07:45:18.626571787Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790479220","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 17.3.12-tuxcare.16.","status":"published","published":"2026-09-27T03:20:20Z","modified":"2026-10-19T07:45:19.816733318Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790480117","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 18.2.14-tuxcare.15.","status":"published","published":"2026-09-27T03:35:17Z","modified":"2026-10-19T07:45:18.368247799Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790482357","title":"TuxCare security update for @angular (1 CVE)","description":"TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 7.2.1-tuxcare.5.","status":"published","published":"2026-09-27T04:12:37Z","modified":"2026-11-02T19:58:39.245188831Z","updated_at":"2026-11-02T20:23:16.654089Z"},{"id":"CLSA-2026-1790483867","title":"TuxCare security update for @angular (2 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 7.2.11-tuxcare.5.","status":"published","published":"2026-09-27T04:37:47Z","modified":"2026-11-02T19:58:50.455652939Z","updated_at":"2026-11-02T20:22:14.488146Z"},{"id":"CLSA-2026-1790488353","title":"TuxCare security update for @angular (4 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 19.2.21-tuxcare.7.","status":"published","published":"2026-09-27T05:52:33Z","modified":"2026-10-19T07:45:17.964423295Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790489187","title":"TuxCare security update for @angular (5 CVEs)","description":"TuxCare rebuilt 3 @angular packages to address 5 CVEs. Fixed in 19.2.23-tuxcare.5.","status":"published","published":"2026-09-27T06:06:27Z","modified":"2026-10-19T07:45:41.710414737Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790597611","title":"TuxCare security update for @angular (8 CVEs)","description":"TuxCare rebuilt 13 @angular packages to address 8 CVEs. Fixed in 19.2.18-tuxcare.1.","status":"published","published":"2026-09-28T12:13:31Z","modified":"2026-10-16T16:30:44.192495511Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790597633","title":"TuxCare security update for @angular (8 CVEs)","description":"TuxCare rebuilt 13 @angular packages to address 8 CVEs. Fixed in 19.2.14-tuxcare.1.","status":"published","published":"2026-09-28T12:13:53Z","modified":"2026-10-16T16:30:44.598977262Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790597654","title":"TuxCare security update for @angular (9 CVEs)","description":"TuxCare rebuilt 13 @angular packages to address 9 CVEs. Fixed in 18.2.13-tuxcare.1.","status":"published","published":"2026-09-28T12:14:14Z","modified":"2026-10-16T16:30:44.210792715Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1791045476","title":"TuxCare security update for @angular (3 CVEs)","description":"TuxCare rebuilt 6 @angular packages to address 3 CVEs. Fixed in 7.2.0-tuxcare.5.","status":"published","published":"2026-10-03T16:37:56Z","modified":"2026-11-02T19:58:48.690369461Z","updated_at":"2026-11-02T20:22:25.675551Z"},{"id":"CLSA-2026-1791195835","title":"TuxCare security update for @angular/language-service (9 CVEs)","description":"TuxCare rebuilt @angular/language-service to address 9 CVEs. Fixed in 19.2.14-tuxcare.3.","status":"published","published":"2026-10-05T10:23:55Z","modified":"2026-10-19T07:45:46.680732429Z","updated_at":"2026-11-02T15:43:49.016976Z"}]},"sources_more":{"osv":603}}