Visit Angular NES Home Page
Angular 17
Release Notes
Angular
17.3.17 (NES) - December 2025
Notes
- This release contains a security fix for a high severity vulnerability CVE-2025-66412.
- Full Package Names and Versions
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
Security Fixes
- Fixed stored XSS vulnerability involving SVG Animation, SVG URL and MathML Attributes.
17.3.16 (NES) - December 2025
Notes
- Full Package Names and Versions:
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
Security Fixes
- common/http: Prevent Cross-Site Request Forgery (XSRF) token leakage to protocol-relative URLs.
- This release contains a security fix for a high severity vulnerability CVE-2025-66035.
17.3.15 (NES) - September 2025
Notes
- Full package names and versions:
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
Security Fixes
- core: Introduce BootstrapContext for improved server bootstrapping
- This fixes a high severity Information Exposure vulnerability (CVE-2025-59052).
Breaking Changes
core
- The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.
Before:const bootstrap = () => bootstrapApplication(AppComponent, config);
After:const bootstrap = (context: BootstrapContext) => bootstrapApplication(AppComponent, config, context);
In addition,getPlatform()anddestroyPlatform()will now returnnulland be a no-op respectively when running in a server environment.
17.3.14 (NES) - June 17, 2025
Notes
- This release contains no functional changes from 17.3.13
- Full package names and versions
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
17.3.13 (NES) - February 27, 2025
Notes
- This is the initial release of the NES Angular CLI 17.3.x series.
Angular CLI
17.3.20 (NES) - October 2025
Notes
- This release contains a security fix for a high severity vulnerability CVE-2025-59052.
- Full package names and versions
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
Breaking Changes
@angular/ssr
- The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.
Before:const bootstrap = () => bootstrapApplication(AppComponent, config);
After:const bootstrap = (context: BootstrapContext) => bootstrapApplication(AppComponent, config, context);
17.3.19 (NES) - September 2025
Notes
- Full package names and versions
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
Bug Fixes
- Fixed build issues: updated peer dependency version numbers
17.3.18 (NES) - June 5, 2025
Notes
- This release brings in upstream changes from @angular/cli since the last NES release.
- Full package names and versions
@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]@neverendingsupport/[email protected]
17.3.13 (NES) - February 26, 2025
Notes
- This is the initial release of the NES Angular CLI 17.3.x series.