Vulnerabilities
Last updated 16 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) | Medium Risk 6.0 | 7 hours ago | 7 hours ago |
|
|
Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent` | Medium Risk 4.0 | 1 month ago | 1 month ago |
|
|
@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) | Medium Risk 6.1 | 4 months ago | 1 month ago |
|
|
@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning | Medium Risk 6.1 | 4 months ago | 1 month ago |
|
|
@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache | High Risk 7.5 | 4 months ago | 1 month ago |
|
|
@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate) | High Risk 7.5 | 4 months ago | 1 month ago |
|
|
Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client | High Risk 8.0 | 10 months ago | 1 month ago |
|
|
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning | High Risk 8.0 | 2 months ago | 2 months ago |
Page 1