Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-68945

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

angular angular

  • < 20.3.27affected
  • >= 21.0.0-next.0, < 21.2.19affected
  • >= 22.0.0-next.0, < 22.0.2affected

@angular common

  • < 20.3.27affected
  • >= 21.0.0-next.0, < 21.2.19affected
  • >= 22.0.0-next.0, < 22.0.2affected

References