Exploit for CVE-2026-27739

-CVE-2026-27739-poc curl -H "X-Forwarded-For: http://169.254...

Security Bulletin: IBM ApplinX is vulnerable to Improper Validation of Specified Quanitity in Input issue due to the use of source-map-js and @angular/router (CVE-2026-93749).

Summary A security vulnerability in source-map-js a transitive dependency via sass and @angular/router affects IBM ApplinX CVE-2026-93749. These packages are used in the ApplinX web framework front-end. IBM has issued fixes to resolve this vulnerability. The source-map-js version has been updated...

GHSA-JFGX-762W-99VR @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...

@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=21.0.0, <=21.0.2)

@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: OSV:GHSA-JFGX-762W-99VR...

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...

Exposure of Private Personal Information to an Unauthorized Actor

Overview Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the xsrfInterceptorFn in packages/common/http/src/xsrf.ts, where the XSRF interceptor skips token injection for all absolute URLs, including those that share the same...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=20.0.0, <=20.3.29)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source...

@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=21.0.0, <=21.0.2)

@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: GHSA-JFGX-762W-99VR...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-111753 via @angular/common (>=20.0.0-rc.0, <=20.3.29)

@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-111753 Source advisory:...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=20.0.0, <=20.3.29)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +311 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=19.0.0-next.9, <=19.2.25)

@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: GHSA-JFGX-762W-99VR...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +311 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=19.0.0-next.9, <=19.2.25)

@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: OSV:GHSA-JFGX-762W-99VR...

@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2026-111753 via @angular/common (>=21.0.0, <=21.0.2)

@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2026-111753 Source advisory: SNYK:JS-ANGULARCOMMON-21369526...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.28), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-111751 via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-111751 Source advisory: OSV:GHSA-57XQ-RJX2-V5XH...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the RouterLink directive's urlTree computed signal, which permanently caches a UrlTree instance including its cloned query parameter map and segment tree in ReactiveNode.value for...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.28), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-111751 via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-111751 Source advisory: SNYK:JS-ANGULARROUTER-21280763...

@augustalabs/ki-assistent (>=1.0.8, <=1.0.14), @bitblit/ngx-acute-common (>=6.1.196-alpha, <=6.1.209-alpha) +17 more potentially affected by CVE-2026-111751 via @angular/router (>=21.2.0, <=21.2.22)

@angular/router NPM version =21.2.0, =1.0.8, =6.1.196-alpha, =6.1.196-alpha, =0.1.0, =21.2.0-snapshot-1772819386488, =21.2.0-snapshot-1772819386488, =6.0.1, =2.0.1, =0.19.0, =14.0.0, =0.107.1, =0.107.1, =0.5.1, =0.5.11 and more Source cves: CVE-2026-111751 Source advisory: GHSA-57XQ-RJX2-V5XH...

@augustalabs/ki-assistent (>=1.0.8, <=1.0.14), @bitblit/ngx-acute-common (>=6.1.196-alpha, <=6.1.209-alpha) +17 more potentially affected by CVE-2026-111751 via @angular/router (>=21.2.0, <=21.2.22)

@angular/router NPM version =21.2.0, =1.0.8, =6.1.196-alpha, =6.1.196-alpha, =0.1.0, =21.2.0-snapshot-1772819386488, =21.2.0-snapshot-1772819386488, =6.0.1, =2.0.1, =0.19.0, =14.0.0, =0.107.1, =0.107.1, =0.5.1, =0.5.11 and more Source cves: CVE-2026-111751 Source advisory:...

@augustalabs/ki-assistent (>=1.0.8, <=1.0.14), @bitblit/ngx-acute-common (>=6.1.196-alpha, <=6.1.209-alpha) +17 more potentially affected by CVE-2026-111751 via @angular/router (>=21.2.0, <=21.2.22)

@angular/router NPM version =21.2.0, =1.0.8, =6.1.196-alpha, =6.1.196-alpha, =0.1.0, =21.2.0-snapshot-1772819386488, =21.2.0-snapshot-1772819386488, =6.0.1, =2.0.1, =0.19.0, =14.0.0, =0.107.1, =0.107.1, =0.5.1, =0.5.11 and more Source cves: CVE-2026-111751 Source advisory: OSV:GHSA-57XQ-RJX2-V5XH...

GHSA-57XQ-RJX2-V5XH @angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8 and RouterLink directives are rendered with queryParamsHandling: 'merge' or 'preserve', configured either per link or globally via defaultQueryParamsHandling. Starting i...