CoreUI PRO for Angular v5.6.22 - Angular 21.2.10 Security Update

Friday, April 24, 2026

We are pleased to announce the release of CoreUI PRO for Angular v5.6.22. This security and maintenance update brings full support for Angular 21.2.10 and includes critical security patches addressing multiple vulnerabilities in hono, lodash, path-to-regexp, picomatch, brace-expansion, and follow-redirects. This update ensures your enterprise Angular applications run securely with the latest framework improvements and comprehensive dependency updates.

Speed up your responsive apps and websites with fully-featured, ready-to-use open-source admin panel templates—free to use and built for efficiency.

How to Update

To update to CoreUI PRO v5.6.22 for Angular 21.2.10, follow these simple steps:

ng update @angular/[email protected] @angular/[email protected] @coreui/coreui-pro@~5.24.0 @coreui/angular-pro@~5.6.22

What’s New

Angular 21.2.10 Support

CoreUI PRO for Angular v5.6.22 fully supports Angular 21.2.10, delivering:

Security Fixes: Critical security patches from the Angular team
Stability Updates: Framework-level bug fixes and improvements
Performance: Runtime optimizations and enhancements
Compatibility: Enhanced compatibility with Angular ecosystem
PRO Components: All exclusive PRO components updated and secured

Critical Security Patches

This release addresses multiple security vulnerabilities to ensure your enterprise applications are protected:

Hono Framework - Multiple Vulnerabilities

Updated hono to patch six security vulnerabilities:

GHSA-26pp-8wgv-hjvm: Security advisory resolved
GHSA-r5rp-j6wh-rvv4: Security advisory resolved
GHSA-xpcf-pg52-r92g: Security advisory resolved
GHSA-xf4j-xp2r-rqqx: Security advisory resolved
GHSA-wmmm-f939-6g9c: Security advisory resolved
GHSA-458j-xx4x-4375: Security advisory resolved

Lodash - Multiple Vulnerabilities (GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh)

Updated lodash-es to v4.18.1 to address two security advisories in the lodash utility library.

Path-to-regexp - Multiple Vulnerabilities (GHSA-j3q9-mxjg-w52f, GHSA-27v5-c462-wpq7)

Patched two security issues in path-to-regexp that could affect route matching in affected applications.

Picomatch - Multiple Vulnerabilities (GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj)

Resolved two security advisories in the picomatch glob matching library.

@hono/node-server (GHSA-92pp-h63x-v22m)

Patched a security vulnerability in the @hono/node-server package.

Brace-expansion (GHSA-f886-m6hf-6m8v)

Resolved a security issue in the brace-expansion package.

Follow-redirects (GHSA-r4q5-vmmm-2653)

Patched a security vulnerability in the follow-redirects HTTP library.

We strongly recommend updating enterprise applications immediately to ensure protection against these known vulnerabilities and maintain compliance with security best practices.

Development Tooling Updates

Updated Angular and development tools to the latest versions for enhanced development experience:

Angular Core and CLI: Full support for Angular 21.2.10
Build Tools: Updated @angular-devkit/schematics, @angular/build, and @angular/cli to 21.2.8
Component Development Kit: Latest @angular/cdk 21.2.8
Code Quality: Updated eslint 10.2.1 and typescript-eslint 8.59.0
Package Management: Updated ng-packagr 21.2.3 for better library builds
Formatter: Updated prettier 3.8.3

PRO Components

All exclusive enterprise components updated to v5.6.22:

Calendar - Advanced scheduling component
Date & Time Pickers - Professional date selection
Multi Select - Enhanced multi-selection
Smart Table - Enterprise data table
Smart Pagination - Intelligent pagination
Loading Button - Interactive loading states
And more PRO-exclusive components

Dependency Updates

We have updated key dependencies to their latest versions, ensuring improved performance, security, and compatibility with Angular 21.2.10:

Angular Core Updates

@angular/animations from: 21.2.5 to: 21.2.10
@angular/common from: 21.2.5 to: 21.2.10
@angular/compiler from: 21.2.5 to: 21.2.10
@angular/core from: 21.2.5 to: 21.2.10
@angular/forms from: 21.2.5 to: 21.2.10
@angular/localize from: 21.2.5 to: 21.2.10
@angular/platform-browser from: 21.2.5 to: 21.2.10
@angular/router from: 21.2.5 to: 21.2.10

Angular Development Tools

@angular-devkit/schematics from: 21.2.3 to: 21.2.8
@angular/build from: 21.2.3 to: 21.2.8
@angular/cli from: 21.2.3 to: 21.2.8
@angular/cdk from: 21.2.3 to: 21.2.8
@angular/compiler-cli from: 21.2.5 to: 21.2.10
@angular/language-service from: 21.2.5 to: 21.2.10

Build and Package Management Tools

ng-packagr from: 21.2.1 to: 21.2.3
prettier from: 3.8.1 to: 3.8.3
jasmine-core from: 6.1.0 to: 6.2.0

Code Quality and Linting

eslint from: 10.1.0 to: 10.2.1
typescript-eslint from: 8.57.1 to: 8.59.0

Utilities

lodash-es from: 4.17.23 to: 4.18.1

These updates bring your enterprise application to the latest Angular 21.2.10 and related library versions with critical security improvements.

Released Packages

This release includes the updated CoreUI PRO Angular package:

@coreui/angular-pro: v5.6.22 - PRO Angular components with exclusive enterprise features

Migration Notes

This is a security and maintenance release with full backward compatibility. No breaking changes to PRO components were introduced. If you’re upgrading:

Update dependencies using the ng update command above
Review your application for any console warnings
Run your test suite to ensure everything works as expected
Verify security patches by running npm audit to check for vulnerabilities
Test all PRO components in your application

Why Update?

Updating to CoreUI PRO for Angular v5.6.22 provides critical benefits:

Security: Critical patches for multiple vulnerabilities (hono, lodash, path-to-regexp, picomatch, brace-expansion, follow-redirects)
Latest Angular: Access to Angular 21.2.10 improvements and security fixes
PRO Components: Updated and secured enterprise-grade components
Stability: Framework-level bug fixes and enhancements
Best Practices: Stay current with latest security standards
Enterprise Support: Professionally maintained PRO components
Compliance: Meet security compliance requirements with latest patches

Additional Resources

For a comprehensive overview of all changes, enhancements, and updates introduced in this release, please refer to the full changelog on GitHub.