javascriptangular/angular-cli #33934Not a task: not reproduced

Upgrade image-size package used as dependency

envgap__angular__angular-cli-33934-pr33946

Original GitHub issue ↗Dated source checkout ↗Opened 2026-08-26

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

In a clean container the reported failure did not reproduce, or the known fix did not make the project run.

02 / ENVIRONMENT RECIPE

Base commit: 16ad6303fb2fd1acab7f54b3d453935266a21ca5
Manifest: packages/angular/build/package.json
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

angular/angular-cli #33934 · read the original issue

### Command

build

### Description

$ npm ls image-size
<LIB> <PATH>
└─┬ @angular-devkit/build-angular@21.2.22
  └─┬ less@4.4.2
    └── image-size@0.5.5

@angular-devkit/build-angular is using a version of image size that has a CVE vulnerability

I can't upgrade from Angular 21, unfortunately

### Describe the solution you'd like

Upgrade to latest image-size package

### Describe alternatives you've considered

_No response_

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]