Angular core version 10.0.5 is a patch release in the Angular 10 series, building upon the foundation laid by its predecessor, version 10.0.4. Both versions share the same core dependencies, relying on tslib version 2.0.0 or higher for TypeScript helper functions. They maintain compatibility with existing RxJS 6.5.3+ and Zone.js ~0.10.3 peer dependencies, ensuring a smooth upgrade path for projects already using Angular 10. The underlying project structure and licensing remain consistent, with both versions residing in the packages/core directory within the main Angular repository and being licensed under the MIT license.
While the file count remains identical at 414, a subtle difference exists in the dist section. Version 10.0.5 is marginally smaller when unpacked, with a size of 17,552,695 bytes compared to version 10.0.4's 17,555,783 bytes. This suggests potential optimizations or minor code changes that resulted in a slightly reduced footprint. Crucially, the most significant difference lies in the release date. Version 10.0.5 was released on July 22, 2020, a week after version 10.0.4's release on July 15, 2020. Given this short timeframe, developers can expect 10.0.5 to contain bug fixes and minor improvements addressing issues discovered in the previous release, making it a recommended upgrade for enhanced stability and reliability within their Angular applications.
All the vulnerabilities related to the version 10.0.5 of the package
Cross site scripting in Angular
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 10.2.5, 11.0.5 or 11.1.0-next.3 is advised to to address this issue.
