Visit Angular NES Home Page

Angular 17

Release Notes

Angular

17.3.17 (NES) - December 2025

Notes

Security Fixes

  • Fixed stored XSS vulnerability involving SVG Animation, SVG URL and MathML Attributes.

17.3.16 (NES) - December 2025

Notes

Security Fixes

  • common/http: Prevent Cross-Site Request Forgery (XSRF) token leakage to protocol-relative URLs.
    • This release contains a security fix for a high severity vulnerability CVE-2025-66035.

17.3.15 (NES) - September 2025

Notes

Security Fixes

  • core: Introduce BootstrapContext for improved server bootstrapping
    • This fixes a high severity Information Exposure vulnerability (CVE-2025-59052).

Breaking Changes

core
  • The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.
    Before:
    const bootstrap = () => bootstrapApplication(AppComponent, config);
    

    After:
    const bootstrap = (context: BootstrapContext) =>
      bootstrapApplication(AppComponent, config, context);
    

    In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

17.3.14 (NES) - June 17, 2025

Notes

17.3.13 (NES) - February 27, 2025

Notes

  • This is the initial release of the NES Angular CLI 17.3.x series.

Angular CLI

17.3.20 (NES) - October 2025

Notes

Breaking Changes

@angular/ssr
  • The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.
    Before:
    const bootstrap = () => bootstrapApplication(AppComponent, config);
    

    After:
    const bootstrap = (context: BootstrapContext) =>
      bootstrapApplication(AppComponent, config, context);
    

17.3.19 (NES) - September 2025

Notes

Bug Fixes

  • Fixed build issues: updated peer dependency version numbers

17.3.18 (NES) - June 5, 2025

Notes

17.3.13 (NES) - February 26, 2025

Notes

  • This is the initial release of the NES Angular CLI 17.3.x series.