@angular/service-worker vulnerabilities
CVEs whose affected-version data names the @angular/service-worker package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-50169MediumAngular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities
Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities
▾ Sunlitangular · @angular/service-workerEPSS 0.23%via GHSA
CVE-2026-50184Medium@angular/service-worker: Request Credential & Cache Policy Stripping
@angular/service-worker: Request Credential & Cache Policy Stripping
▾ Sunlitangular · @angular/service-workerEPSS 0.21%via GHSA
CVE-2026-54264High@angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker
@angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker
▾ Twilightangular · @angular/service-workerEPSS 0.39%via GHSA