Angular core version 10.0.7 represents a minor update to the core Angular framework, building upon the foundation laid by version 10.0.6. Both versions share a common description, "Angular - the core framework," indicating that the fundamental aspects of the framework remain consistent. The dependency on tslib version ^2.0.0 ensures compatibility with TypeScript helper functions, while peer dependencies on rxjs version ^6.5.3 and zone.js version ~0.10.3 guarantee interoperability with these essential libraries for reactive programming and asynchronous task management. The license remains MIT for both.
Crucially, the file count (414) and unpacked size (17556260 bytes) are identical, suggesting no significant structural changes in the package contents. The code repository link stays fixed ensuring the update comes from the official Angular repository.The most notable difference lies in the release dates. Version 10.0.7 was released on July 30, 2020, while version 10.0.6 was released on July 28, 2020. This implies that version 10.0.7 likely includes bug fixes, performance improvements, or minor feature enhancements addressed since the previous release. For Angular developers, upgrading to version 10.0.7 is recommended to benefit from the latest improvements and ensure a more stable and performant application environment, given this is a minor patch focusing on bug fixes.
All the vulnerabilities related to the version 10.0.7 of the package
Cross site scripting in Angular
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 10.2.5, 11.0.5 or 11.1.0-next.3 is advised to to address this issue.
