Skip to content

docs: track CVE-2025-66035 in @angular/common (ADO CG alert 215328) #3020

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
zfengms wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs: track CVE-2025-66035 in @angular/common (ADO CG alert 215328) #3020

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,12 @@
# Unreleased

### Security

* Tracking: CVE-2025-66035 in `@angular/common` 12.2.17 (High) — ADO Component Governance alert 215328 / id 13734978. A fix is only available in `@angular/common` 19.2.16 / 20.3.14 / 21.0.1. The minimal viable target is `@angular/common` 19.2.16 with the full `@angular/*` suite moved to `^19.2.x`. This is deferred as a coordinated migration because a version-only bump would break compilation. Migration scope (desktop/ workspace):
* Move all 12 `@angular/*` packages together to `^19.2.x`: animations, cdk, common, compiler, compiler-cli, core, forms, material, platform-browser, platform-browser-dynamic, platform-server, router.
* Peer toolchain upgrades: TypeScript `~4.6.0` → `~5.5`, RxJS `^6.6.7` → `^7.8`, zone.js `^0.11.4` → `~0.15`, `@ngtools/webpack` `^12` → `^19` (likely introducing `@angular/cli`, currently absent).
* Cross-major migrations 13→19 (Ivy-only, ngcc removal, standalone/control-flow, RxJS 7, Material theming API changes, deprecated API removals); run `ng update` per major.

# 2.23.0

[All items](https://github.com/Azure/BatchExplorer/milestone/57?closed=1)
Expand Down