Lucene search
+L

1 matches found

OSV
OSV
added 2025/09/10 9:56 p.m.7 views

GHSA-68X2-MX4Q-78M7 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage

Impact Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as a JavaScript module-scoped global variable. When multiple requests are processed concurrently, they could inadvertently share...

7.1CVSS6.6AI score0.00326EPSS
SaveExploits1References5
Rows per page
Query Builder