Wijmo security vulnerability caused by @angular dependencies through Angular Components
Several @angular packages (common, core, and forms) have been discovered to have a security vulnerability, which can cause applications to inherit various issues, such as SSR/hydration, DoS, or XSS exposure depending on usage.
Remediation
Upgrade Angular packages to patched versions:
- @angular/common from 20.3.18 to 20.3.27
- @angular/core from 20.3.18 to 20.3.27
- @angular/forms from 20.3.18 to the same patched Angular version to keep Angular package versions aligned
Note: Since this is an external dependency issue, no update to any Wijmo library is needed.