@angular/common vulnerabilities (npm)
8 vulnerabilities.
-
@angular/commonnpm @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) 5.9 Medium -
@angular/commonnpm Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent` 4.0 Medium -
@angular/commonnpm Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning 8.8 High -
@angular/commonnpm Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate) 8.2 High -
@angular/commonnpm Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning 8.8 High -
@angular/commonnpm Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) 8.2 High -
@angular/commonnpm Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache 8.2 High -
@angular/commonnpm Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs 7.7 High