CoreUI for Angular v5.6.22 - Angular 21.2.10 Security Update

Friday, April 24, 2026

We are pleased to announce the release of CoreUI for Angular v5.6.22. This security and maintenance update brings full support for Angular 21.2.10 and includes critical security patches addressing multiple vulnerabilities in hono, lodash, path-to-regexp, picomatch, brace-expansion, and follow-redirects. This update ensures your Angular applications run securely with the latest framework improvements and comprehensive dependency updates.

Speed up your responsive apps and websites with fully-featured, ready-to-use open-source admin panel templates—free to use and built for efficiency.

How to Update

To update to CoreUI v5.6.22 for Angular 21.2.10, follow these simple steps to ensure your project is up-to-date:

Verify that you are using a supported version of node.js before you upgrade your application. Angular v21 supports node.js versions: v18.19 and newer, or v20.11 and newer, or v22.0 and newer.
To update your application to Angular v21.2.10 and CoreUI v5.6.22, in the application’s project directory, run:

ng update @angular/[email protected] @angular/[email protected] @coreui/coreui@~5.6.0 @coreui/angular@~5.6.22

Please ensure that there are no error messages in the results.
See also:
- CoreUI for Angular Installation
- CoreUI for Angular versions

What’s New

Angular Framework Update

CoreUI for Angular v5.6.22 fully supports Angular 21.2.10, bringing you the latest framework patches:

Security Fixes: Critical security patches from the Angular team
Stability Updates: Framework-level bug fixes and improvements
Performance: Runtime optimizations and enhancements
Compatibility: Enhanced compatibility with Angular ecosystem and TypeScript

Critical Security Patches

This release addresses multiple security vulnerabilities to ensure your applications are protected:

Hono Framework - Multiple Vulnerabilities

Updated hono to patch six security vulnerabilities:

GHSA-26pp-8wgv-hjvm: Security advisory resolved
GHSA-r5rp-j6wh-rvv4: Security advisory resolved
GHSA-xpcf-pg52-r92g: Security advisory resolved
GHSA-xf4j-xp2r-rqqx: Security advisory resolved
GHSA-wmmm-f939-6g9c: Security advisory resolved
GHSA-458j-xx4x-4375: Security advisory resolved

Lodash - Multiple Vulnerabilities (GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh)

Updated lodash-es to v4.18.1 to address two security advisories in the lodash utility library.

Path-to-regexp - Multiple Vulnerabilities (GHSA-j3q9-mxjg-w52f, GHSA-27v5-c462-wpq7)

Patched two security issues in path-to-regexp that could affect route matching in affected applications.

Picomatch - Multiple Vulnerabilities (GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj)

Resolved two security advisories in the picomatch glob matching library.

@hono/node-server (GHSA-92pp-h63x-v22m)

Patched a security vulnerability in the @hono/node-server package.

Brace-expansion (GHSA-f886-m6hf-6m8v)

Resolved a security issue in the brace-expansion package.

Follow-redirects (GHSA-r4q5-vmmm-2653)

Patched a security vulnerability in the follow-redirects HTTP library.

We strongly recommend updating as soon as possible to protect your applications against these known vulnerabilities.

Development Tooling Updates

Updated Angular and development tools to the latest versions:

Angular Core and CLI: Full support for Angular 21.2.10
Build Tools: Updated @angular-devkit/schematics, @angular/build, and @angular/cli to 21.2.8
Component Development Kit: Latest @angular/cdk 21.2.8
Code Quality: Updated eslint 10.2.1 and typescript-eslint 8.59.0
Package Management: Updated ng-packagr 21.2.3 for better library builds
Formatter: Updated prettier 3.8.3

Dependency Updates

We have updated key dependencies to their latest versions, ensuring improved performance, security, and compatibility with Angular 21.2.10:

Angular Core Updates

@angular/animations from: 21.2.5 to: 21.2.10
@angular/common from: 21.2.5 to: 21.2.10
@angular/compiler from: 21.2.5 to: 21.2.10
@angular/core from: 21.2.5 to: 21.2.10
@angular/forms from: 21.2.5 to: 21.2.10
@angular/localize from: 21.2.5 to: 21.2.10
@angular/platform-browser from: 21.2.5 to: 21.2.10
@angular/router from: 21.2.5 to: 21.2.10

Angular Development Tools

@angular-devkit/schematics from: 21.2.3 to: 21.2.8
@angular/build from: 21.2.3 to: 21.2.8
@angular/cli from: 21.2.3 to: 21.2.8
@angular/cdk from: 21.2.3 to: 21.2.8
@angular/compiler-cli from: 21.2.5 to: 21.2.10
@angular/language-service from: 21.2.5 to: 21.2.10

Build and Package Management Tools

ng-packagr from: 21.2.1 to: 21.2.3
prettier from: 3.8.1 to: 3.8.3
jasmine-core from: 6.1.0 to: 6.2.0

Code Quality and Linting

eslint from: 10.1.0 to: 10.2.1
typescript-eslint from: 8.57.1 to: 8.59.0

Utilities

lodash-es from: 4.17.23 to: 4.18.1

These updates bring your application to the latest Angular 21.2.10 and related library versions.

Released Packages

This release includes updates to the following CoreUI Angular packages:

@coreui/angular: v5.6.22 - Core Angular components and directives
@coreui/angular-chartjs: v5.6.22 - Chart.js integration for Angular
@coreui/icons-angular: v5.6.22 - CoreUI Icons for Angular

All packages are synchronized to version 5.6.22 to ensure compatibility and consistent behavior across the CoreUI Angular ecosystem.

Migration Notes

This is a security and maintenance release with full backward compatibility. No breaking changes were introduced. If you’re upgrading from an earlier version:

Update your dependencies using the ng update command shown above
Review your application for any console warnings
Run your test suite to ensure everything works as expected
Verify security patches by running npm audit to check for vulnerabilities

Why Update?

Updating to CoreUI for Angular v5.6.22 provides critical benefits:

Security: Critical patches for multiple vulnerabilities (hono, lodash, path-to-regexp, picomatch, brace-expansion, follow-redirects)
Latest Angular Features: Access to Angular 21.2.10 improvements
Stability: Framework-level bug fixes and enhancements
Best Practices: Stay current with latest security standards
Compatibility: Synchronized package versions prevent conflicts
Support: Remain on officially supported versions

Additional Resources

For a comprehensive overview of all changes, enhancements, and updates introduced in this release, please refer to the full changelog on GitHub.