Visit Angular NES Home Page

Angular 7

Release Notes

Angular

7.2.23 (NES) - December, 2025

Notes

Security Fixes

  • Fixed stored XSS vulnerability involving SVG Animation, SVG URL and MathML Attributes.
    • This fixes a high severity Cross-Site Scripting (XSS) vulnerability CVE-2025-66412.

7.2.22 (NES) - December, 2025

Notes

Security Fixes

  • common/http: Prevent Cross-Site Request Forgery (XSRF) token leakage to protocol-relative URLs.
    • This release contains a security fix for a high severity vulnerability CVE-2025-66035.

7.2.21 (NES) - June 17, 2025

Notes

7.2.20 (NES)

Notes

  • Added the HeroDevs NES License to each package
  • Full Version: 7.2.16-{PACKAGE_NAME}-7.2.20

7.2.19 (NES)

Notes

  • Added bazel, elements, and language-service to available package list
  • Full Version: 7.2.16-{PACKAGE_NAME}-7.2.19

Bug Fixes

  • Fix origination version to 7.2.16 to reflect the OSS code included in the NES version.

7.2.18 (NES)

Notes

  • Full Version: 7.2.15-{PACKAGE_NAME}-7.2.18

Bug Fixes

  • Fixed build issues: updated peer dependency version numbers

7.2.17 (NES)

Notes

  • Full Version: 7.2.17-{PACKAGE_NAME}

Bug Fixes

  • Core: Fixed sanitizer functionality for null DOMParser body
  • Common: Corrected ContentType for boolean values in HttpClient request body
  • Platform-browser: Fixed memory leak related to shadow DOM encapsulation
  • Core: Addressed potential XSS attack in development through SSR (CVE-2021-4231)

Angular CLI

7.3.14 (NES) - September 2025

Notes

Bug Fixes

  • Fixed build issues: updated peer dependency version numbers

7.3.13 (NES) - June 5, 2025

Notes

7.3.12 (NES) - February 28, 2025

Security

7.3.11 (NES) - February 20, 2025

Notes

  • This is the initial release of the NES Angular CLI 7.3.x series.