Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/08/03 3:59 p.m.•85 views

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular's HttpTransferCache caches HTTP requests made during Server-Side Rendering SSR so that they can be reused during client-side hydration. During SSR, HttpTransferCache previously generated identical key material for distinct request parameters when repeated values were present because...

8.8CVSS5.9AI score0.00177EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2026/08/03 3:59 p.m.•19 views

GHSA-JHPW-976M-542J Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular's HttpTransferCache caches HTTP requests made during Server-Side Rendering SSR so that they can be reused during client-side hydration. During SSR, HttpTransferCache previously generated identical key material for distinct request parameters when repeated values were present because...

8.8CVSS5.9AI score0.00177EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/08/03 3:58 p.m.•29 views

CVE-2026-68945 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.8AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/08/03 3:58 p.m.•17 views

CVE-2026-68945 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.8AI score0.00177EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/03 3:58 p.m.•64 views

CVE-2026-68945 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS0.00177EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/03 3:58 p.m.•27 views

EUVD-2026-52343

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.8AI score0.00177EPSS
SaveExploits0References6
Rows per page
Query Builder