Vulnerability in @Angular Common
CVE-2026-68945
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing…
Affected products
- @Angular Common — versions < 20.3.27, >= 21.0.0-next.0, < 21.2.19, >= 22.0.0-next.0, < 22.0.2
- Angular — versions < 20.3.27, >= 21.0.0-next.0, < 21.2.19, >= 22.0.0-next.0, < 22.0.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)