@angular/common vulnerabilities
CVEs whose affected-version data names the @angular/common package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-68945HighAngular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
▾ Twilightangular · @angular/commonEPSS 0.12%via GHSA
CVE-2026-50170High@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache
@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache
▾ Twilightangular · @angular/commonEPSS 0.43%via GHSA
CVE-2026-50171High@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)
@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)
▾ Twilightangular · @angular/commonEPSS 0.26%via GHSA
CVE-2026-54266High@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning
@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning
▾ Twilightangular · @angular/commonEPSS 0.13%via GHSA
CVE-2026-54268High@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)
@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)
▾ Twilightangular · @angular/commonEPSS 0.58%via GHSA