Skip to main content Skip to footer

Wijmo security vulnerability caused by @angular dependencies through Angular Components

Several @angular packages (common, core, and forms) have been discovered to have a security vulnerability, which can cause applications to inherit various issues, such as SSR/hydration, DoS, or XSS exposure depending on usage.

Remediation

Upgrade Angular packages to patched versions:

  • @angular/common from 20.3.18 to 20.3.27
  • @angular/core from 20.3.18 to 20.3.27
  • @angular/forms from 20.3.18 to the same patched Angular version to keep Angular package versions aligned

Note: Since this is an external dependency issue, no update to any Wijmo library is needed.