CLSA-2026-1794066068: TuxCare security update for @angular (3 CVEs)
Published Nov 7, 2026
·Updated
TuxCare rebuilt 3 @angular packages to address 3 CVEs. Fixed in 11.2.11-tuxcare.10.
Affected Software
3 affected componentsFixes available
tuxcare/@angular/bazel>=11.2.11-tuxcare.0<11.2.11-tuxcare.10
11.2.11-tuxcare.10
tuxcare/@angular/benchpress>=11.2.11-tuxcare.0<11.2.11-tuxcare.10
11.2.11-tuxcare.10
tuxcare/@angular/language-service>=11.2.11-tuxcare.0<11.2.11-tuxcare.10
11.2.11-tuxcare.10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/@angular/bazelto a version that resolves this vulnerability.Fixed in 11.2.11-tuxcare.10 - Upgrade
Upgrade
tuxcare/@angular/benchpressto a version that resolves this vulnerability.Fixed in 11.2.11-tuxcare.10 - Upgrade
Upgrade
tuxcare/@angular/language-serviceto a version that resolves this vulnerability.Fixed in 11.2.11-tuxcare.10 - Upgrade
Upgrade
@angularto a version that resolves this vulnerability.Fixed in 11.2.11-tuxcare.10
Event History
Nov 7, 2026
Advisory Published
via OSV·04:41 PM
Data Sourced
via OSV·04:41 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which packages need to be checked for this update?
Check tuxcare/@angular/bazel, tuxcare/@angular/benchpress, and tuxcare/@angular/language-service. The update rebuilt these three packages to address the listed CVEs.
2
What fixed version should be deployed?
Deploy version 11.2.11-tuxcare.10 for the affected TuxCare @angular packages.