@bnsights-test/test-admin-portal (>=0.0.18, <=0.0.60), @bnsights-test/test-controls (>=0.0.15, <=0.0.55) +13 more potentially affected by CVE-2026-54264 via @angular/service-worker (>=19.0.0-next.9, <=19.2.25)

@angular/service-worker NPM version =19.0.0-next.9, =0.0.18, =0.0.15, =1.0.0, =1.0.110, =1.2.3, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.0.1, =16.0.0, =1.52.0, =19.0.0, =0.0.27, =0.0.122 Source cves: CVE-2026-54264 Source advisory: OSV:GHSA-QXH6-94W6-9R5P...

Use of Cache Containing Sensitive Information

Overview @angular/service-worker is an Angular - service worker tooling! Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the request reconstruction. An attacker can access sensitive session data or cached private resources by exploiting the...

GHSA-95QP-CMMW-MGQV @angular/service-worker: Request Credential & Cache Policy Stripping

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During thi...

@angular/service-worker: Request Credential & Cache Policy Stripping

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During thi...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50184 via @angular/service-worker (>=21.0.0-next.1, <=21.2.11)

@angular/service-worker NPM version =21.0.0-next.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50184 Source advisory: GHSA-95QP-CMMW-MGQV...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50184 via @angular/service-worker (>=21.0.0-next.1, <=21.2.11)

@angular/service-worker NPM version =21.0.0-next.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50184 Source advisory: OSV:GHSA-95QP-CMMW-MGQV...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) potentially affected by CVE-2026-50184 via @angular/service-worker (>=20.0.0-rc.0, <=20.3.17)

@angular/service-worker NPM version =20.0.0-rc.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 Source cves: CVE-2026-50184 Source advisory: GHSA-95QP-CMMW-MGQV...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=19.0.0-next.9, <=19.2.20)

@angular/service-worker NPM version =19.0.0-next.9, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50184 Source advisory: GHSA-95QP-CMMW-MGQV...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) potentially affected by CVE-2026-50184 via @angular/service-worker (>=20.0.0-rc.0, <=20.3.17)

@angular/service-worker NPM version =20.0.0-rc.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 Source cves: CVE-2026-50184 Source advisory: OSV:GHSA-95QP-CMMW-MGQV...

@agilie/widget-template (>=1.0.6, <=1.1.6), @eui/deps-base (>=18.0.0-next.1, <=18.2.20) +9 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=18.0.0-next.1, <=18.2.14)

@angular/service-worker NPM version =18.0.0-next.1, =1.0.6, =18.0.0-next.1, =18.0.0-next.1, =1.0.0, =12.0.0, =0.0.1, =1.0.0, =18.0.1, =0.0.1, =0.0.26 - ng-x-rocket 1.0.0 - table-collection-library 0.0.0 Source cves: CVE-2026-50184 Source advisory: GHSA-95QP-CMMW-MGQV...

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During thi...

Use of Cache Containing Sensitive Information

Overview @angular/service-worker is an Angular - service worker tooling! Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the request reconstruction. An attacker can access sensitive session-restricted data or expose credentials by exploiting...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50169 via @angular/service-worker (>=21.0.0-next.1, <=21.2.11)

@angular/service-worker NPM version =21.0.0-next.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50169 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359086...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=19.0.0-next.9, <=19.2.20)

@angular/service-worker NPM version =19.0.0-next.9, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50169 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359086...

@agilie/widget-template (>=1.0.6, <=1.1.6), @eui/deps-base (>=18.0.0-next.1, <=18.2.20) +9 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=18.0.0-next.1, <=18.2.14)

@angular/service-worker NPM version =18.0.0-next.1, =1.0.6, =18.0.0-next.1, =18.0.0-next.1, =1.0.0, =12.0.0, =0.0.1, =1.0.0, =18.0.1, =0.0.1, =0.0.26 - ng-x-rocket 1.0.0 - table-collection-library 0.0.0 Source cves: CVE-2026-50169 Source advisory: GHSA-GV2Q-MQQV-365M...

GHSA-GV2Q-MQQV-365M Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During thi...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50169 via @angular/service-worker (>=21.0.0-next.1, <=21.2.11)

@angular/service-worker NPM version =21.0.0-next.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50169 Source advisory: GHSA-GV2Q-MQQV-365M...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) potentially affected by CVE-2026-50169 via @angular/service-worker (>=20.0.0-rc.0, <=20.3.17)

@angular/service-worker NPM version =20.0.0-rc.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 Source cves: CVE-2026-50169 Source advisory: GHSA-GV2Q-MQQV-365M...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=19.0.0-next.9, <=19.2.20)

@angular/service-worker NPM version =19.0.0-next.9, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50169 Source advisory: GHSA-GV2Q-MQQV-365M...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=19.0.0-next.9, <=19.2.20)

@angular/service-worker NPM version =19.0.0-next.9, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50169 Source advisory: OSV:GHSA-GV2Q-MQQV-365M...