[Snyk] Upgrade @angular/compiler from 14.2.5 to 19.2.6 #794

nerdy-tech-com-gitub · 2025-05-01T04:25:31Z

Snyk has created this PR to upgrade @angular/compiler from 14.2.5 to 19.2.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 268 versions ahead of your current version.
The recommended version was released 21 days ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Denial of Service (DoS) SNYK-JS-WS-7266574	169	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	169	Proof of Concept
Uncaught Exception SNYK-JS-SOCKETIO-7278048	169	No Known Exploit
Sandbox Bypass SNYK-JS-WEBPACK-3358798	169	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	169	Proof of Concept
Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	169	No Known Exploit
Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	169	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	169	Proof of Concept
Uncaught Exception SNYK-JS-ENGINEIO-5496331	169	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ADOBECSSTOOLS-6096077	169	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	169	Proof of Concept
Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	169	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	169	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	169	Proof of Concept
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	169	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	169	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	169	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	169	Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	169	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	169	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	169	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	169	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ADOBECSSTOOLS-5871286	169	No Known Exploit
Open Redirect SNYK-JS-EXPRESS-6474509	169	No Known Exploit
Cross-site Scripting SNYK-JS-EXPRESS-7926867	169	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	169	Proof of Concept
Always-Incorrect Control Flow Implementation SNYK-JS-HTTPPROXYMIDDLEWARE-9691387	169	No Known Exploit
Improper Check for Unusual or Exceptional Conditions SNYK-JS-HTTPPROXYMIDDLEWARE-9691389	169	No Known Exploit
Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	169	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	169	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	169	No Known Exploit
Improper Input Validation SNYK-JS-NANOID-8492085	169	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	169	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	169	Proof of Concept
Improper Input Validation SNYK-JS-POSTCSS-5926692	169	No Known Exploit
Cross-site Scripting SNYK-JS-SEND-7926862	169	No Known Exploit
Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	169	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	169	Proof of Concept

Release notes

Package name: @angular/compiler

19.2.6 - 2025-04-09

compiler

Commit	Description
	error if rawText isn't estimated correctly (#60529) (#60753)

compiler-cli

Commit	Description
	ensure HMR works with different output module type (#60797)

core

Commit	Description
	fix docs for output migration (#60764)
	fix ng generate @ angular/core:output-migration. Fixes #58650 (#60763)
	reduce total memory usage of various migration schematics (#60776)

language-service

Commit	Description
	Do not provide element completions in end tag (#60616)
	Ensure dollar signs are escaped in completions (#60597)

19.2.5 - 2025-04-02

Commit	Description
	step 6 tutorial docs (#60630)