1623 matches found
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the HttpClient which has a built-in XSRF protection mechanism. An attacker can obtain sensitive authentication tokens by crafting requests using protocol-relative URLs that cause the...
EUVD-2025-199769
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential...
CVE-2025-66035
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential...
CVE-2025-66035
CVE-2025-66035 affects Angular's HttpClient, allowing a XSRF token leakage via protocol-relative URLs (//) that are treated as same-origin, causing the token to be sent in X-XSRF-TOKEN. Impact described as credential leakage through app logic, enabling unauthorized CSRF token disclosure to attack...
CVE-2025-66035 Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential...
CVE-2025-66035 Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential...
CVE-2025-66035 Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential...
PT-2025-48196
Name of the Vulnerable Software and Affected Versions Angular versions prior to 19.2.16 Angular versions prior to 20.3.14 Angular versions prior to 21.0.1 Description Angular’s HttpClient has a built-in Cross-Site Request Forgery XSRF protection mechanism. When handling requests with...
Angular 安全漏洞
Angular is a development platform of Angular open source. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A security vulnerability exists in Angular versions prior to 19.2.16, prior to 20.3.14, and prior to 21.0.1, which stems from the...
EUVD-2025-199282
Malicious code in @trackstar/test-angular-package npm...
EUVD-2025-199285
Malicious code in @trackstar/angular-trackstar-link npm...
Malicious code in @trackstar/angular-trackstar-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7a5bb22cafe26b985d8470c0ee240b4b2b201efd50c36c27620ff397d01863 The package @trackstar/angular-trackstar-link was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191322 Malicious code in @trackstar/angular-trackstar-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7a5bb22cafe26b985d8470c0ee240b4b2b201efd50c36c27620ff397d01863 The package @trackstar/angular-trackstar-link was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199070
Malicious code in itobuz-angular-button npm...
Malicious code in itobuz-angular-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1e5a2f36eaf45beca864b2fa27d356d6d087ab2083dae3a6fab3dc08561357 The package itobuz-angular-button was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190973 Malicious code in itobuz-angular-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1e5a2f36eaf45beca864b2fa27d356d6d087ab2083dae3a6fab3dc08561357 The package itobuz-angular-button was found to contain malicious code. Source: ghsa-malware...
Malicious code in itobuz-angular-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed61db59aa59cee728d1b2cbe413a85ae32a192004efad9e9d126770433bdf The package itobuz-angular-auth was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190972 Malicious code in itobuz-angular-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed61db59aa59cee728d1b2cbe413a85ae32a192004efad9e9d126770433bdf The package itobuz-angular-auth was found to contain malicious code. Source: ghsa-malware...