CLSA-2026-1793920842: TuxCare security update for @angular (4 CVEs)
Published Nov 6, 2026
·Updated
TuxCare rebuilt 3 @angular packages to address 4 CVEs. Fixed in 18.2.14-tuxcare.18.
Affected Software
3 affected componentsFixes available
tuxcare/@angular/bazel>=18.2.14-tuxcare.0<18.2.14-tuxcare.18
18.2.14-tuxcare.18
tuxcare/@angular/benchpress>=18.2.14-tuxcare.0<18.2.14-tuxcare.18
18.2.14-tuxcare.18
tuxcare/@angular/language-service>=18.2.14-tuxcare.0<18.2.14-tuxcare.18
18.2.14-tuxcare.18
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/@angular/bazelto a version that resolves this vulnerability.Fixed in 18.2.14-tuxcare.18 - Upgrade
Upgrade
tuxcare/@angular/benchpressto a version that resolves this vulnerability.Fixed in 18.2.14-tuxcare.18 - Upgrade
Upgrade
tuxcare/@angular/language-serviceto a version that resolves this vulnerability.Fixed in 18.2.14-tuxcare.18 - Upgrade
Upgrade
@angular packagesto a version that resolves this vulnerability.Fixed in 18.2.14-tuxcare.18
Event History
Nov 6, 2026
Advisory Published
via OSV·12:20 AM
Data Sourced
via OSV·12:20 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which packages are included in this update?
The update covers tuxcare/@angular/bazel, tuxcare/@angular/benchpress, and tuxcare/@angular/language-service.
2
What version contains the fixes?
The four CVEs are fixed in version 18.2.14-tuxcare.18.