CVE-2026-68945
Fixed in a distro release EPSS <1%CVSS 8.8
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.2.
Products: angular, @angular common
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | @angular/common | 22.0.2 |
| npm | @angular/common | 21.2.19 |
| npm | @angular/common | 20.3.27 |
| npm | @angular/common | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | katib-suggestion-hyperopt | 0.19.0-r40 |
| Debian 12 | angular.js | no fix |
| Debian 13 | angular.js | no fix |
| Ubuntu 22.04 LTS | angular.js | no fix |
| Ubuntu 24.04 LTS | angular.js | no fix |
| Ubuntu 26.04 LTS | angular.js | no fix |
| Ubuntu 26.10 | angular.js | no fix |
| Ubuntu Pro 16.04 LTS | angular.js | no fix |
| Ubuntu Pro 18.04 LTS | angular.js | no fix |
| Ubuntu Pro 20.04 LTS | angular.js | no fix |
| Wolfi | katib-suggestion-hyperopt | 0.19.0-r40 |