783 matches found
GHSA-JFGX-762W-99VR @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...
@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...
3d-card (0.0.2), 4byte-peru-components (1.0.0) +311 more potentially affected by CVE-2026-111753 via @angular/common (>=19.0.0-next.9, <=19.2.25)
@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-111753 Source advisory: OSV:GHSA-JFGX-762W-99VR...
3d-card (0.0.2), 4byte-peru-components (1.0.0) +311 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=19.0.0-next.9, <=19.2.25)
@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: GHSA-JFGX-762W-99VR...
@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-111753 via @angular/common (>=20.0.0-rc.0, <=20.3.29)
@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-111753 Source advisory:...
@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-111753 via @angular/common (>=20.0.0, <=20.3.29)
@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-111753 Source advisory:...
@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=20.0.0, <=20.3.29)
@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source...
@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2026-111753 via @angular/common (>=21.0.0, <=21.0.2)
@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2026-111753 Source advisory: OSV:GHSA-JFGX-762W-99VR...
@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=21.0.0, <=21.0.2)
@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: GHSA-JFGX-762W-99VR...
@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2026-111753 via @angular/common (>=21.0.0, <=21.0.2)
@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2026-111753 Source advisory: SNYK:JS-ANGULARCOMMON-21369526...
Exposure of Private Personal Information to an Unauthorized Actor
Overview Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the xsrfInterceptorFn in packages/common/http/src/xsrf.ts, where the XSRF interceptor skips token injection for all absolute URLs, including those that share the same...
PT-2026-120340
An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...
CVE-2026-111753
An incomplete fix for "GHSA-58c5-g7wp-6w37" https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37 "CVE-2025-66035" in "@angular/common"'s HTTP Client "HttpClient" allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when...
@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=20.0.0, <=20.3.29)
@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source...
@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=21.0.0, <=21.0.2)
@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: MEND:CVE-2026-111753...
CLSA-2026-1792281847 TuxCare security update for @angular/common (2 CVEs)
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 12.0.0-tuxcare.4...
CLSA-2026-1792281846 TuxCare security update for @angular/common (2 CVEs)
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 15.0.3-tuxcare.4...
CLSA-2026-1792281845 TuxCare security update for @angular/common (1 CVE)
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 15.0.3-tuxcare.3...