Angular core version 8.0.1 represents a minor patch release following the stable 8.0.0 version, both iterations focusing on solidifying the Angular framework's core functionalities. Primarily, 8.0.1 addresses any immediate bug fixes or imperfections identified shortly after the 8.0.0 launch, ensuring enhanced stability and reliability for developers adopting the Angular 8 ecosystem.
While the core dependencies on tslib, rxjs, and zone.js remain consistent between the two versions indicating no significant architectural shifts, subtle changes exist. The unpackedSize in the dist object reveals a slight increase from 24573637 bytes in 8.0.0 to 24587168 bytes in 8.0.1. This 13KB increment likely signifies minor code alterations or additions within the patch release.
Developers should prioritize upgrading to 8.0.1 for the most up-to-date and refined Angular 8 experience. Although not packed with groundbreaking new features compared to the major 8.0.0 release, it includes crucial fixes that promote smooth operation and prevent potential issues. Both adhering to the MIT license and sharing the same GitHub repository, these versions confirm the continuous effort towards a more polished Angular framework with the latest patch being released approximately 2 weeks after.
All the vulnerabilities related to the version 8.0.1 of the package
Cross site scripting in Angular
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 10.2.5, 11.0.5 or 11.1.0-next.3 is advised to to address this issue.