Vulnerability-Lookup

CVE-2026-50184 (GCVE-0-2026-50184)

Vulnerability from cvelistv5 – Published: 2026-06-22 15:42 – Updated: 2026-06-22 15:50

Title

Angular: Request Credential & Cache Policy Stripping in Angular Service Worker

Summary

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During this reconstruction process, the helper function strips explicit client-defined safety parameters: the credentials configuration (such as credentials: 'omit') and the HTTP cache mode configuration (such as cache: 'no-store'). These are reverted back to standard browser-default parameters (credentials: 'same-origin' and default HTTP cache properties). This causes the browser to include active credentials (such as cookies or Authorization headers) on outbound requests where the client-side developer explicitly instructed they should be omitted, leading to potential session leaks. Additionally, it causes private or non-cacheable resources to be cached by the service worker's engine, making private page states accessible or persistent inside the client's local cache post-logout. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23.

Severity

5.7 (Medium)


                        
                          CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-524 - Use of Cache Containing Sensitive Information

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/angular/angular/security/advis…	x_refsource_CONFIRM
https://github.com/angular/angular/pull/68904	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
angular	angular	Affected: >= 22.0.0-next.0, < 22.0.0-rc.2 Affected: >= 21.0.0-next.0, < 21.2.15 Affected: >= 20.0.0-next.0, < 20.3.22 Affected: >= 19.0.0-next.0, < 19.2.23 Affected: <= 18.2.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "angular",
          "vendor": "angular",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-rc.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 21.0.0-next.0, \u003c 21.2.15"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0-next.0, \u003c 20.3.22"
            },
            {
              "status": "affected",
              "version": "\u003e= 19.0.0-next.0, \u003c 19.2.23"
            },
            {
              "status": "affected",
              "version": "\u003c= 18.2.14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During this reconstruction process, the helper function strips explicit client-defined safety parameters: the credentials configuration (such as credentials: \u0027omit\u0027) and the HTTP cache mode configuration (such as cache: \u0027no-store\u0027). These are reverted back to standard browser-default parameters (credentials: \u0027same-origin\u0027 and default HTTP cache properties). This causes the browser to include active credentials (such as cookies or Authorization headers) on outbound requests where the client-side developer explicitly instructed they should be omitted, leading to potential session leaks. Additionally, it causes private or non-cacheable resources to be cached by the service worker\u0027s engine, making private page states accessible or persistent inside the client\u0027s local cache post-logout. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-22T15:50:48.049Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/angular/angular/security/advisories/GHSA-95qp-cmmw-mgqv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/angular/angular/security/advisories/GHSA-95qp-cmmw-mgqv"
        },
        {
          "name": "https://github.com/angular/angular/pull/68904",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/angular/angular/pull/68904"
        }
      ],
      "source": {
        "advisory": "GHSA-95qp-cmmw-mgqv",
        "discovery": "UNKNOWN"
      },
      "title": "Angular: Request Credential \u0026 Cache Policy Stripping in Angular Service Worker"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-50184",
    "datePublished": "2026-06-22T15:42:05.167Z",
    "dateReserved": "2026-06-03T22:05:13.644Z",
    "dateUpdated": "2026-06-22T15:50:48.049Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-50184",
      "date": "2026-06-14",
      "epss": "0.00021",
      "percentile": "0.05963"
    }
  }
}

GHSA-95QP-CMMW-MGQV

Vulnerability from github – Published: 2026-06-15 17:13 – Updated: 2026-06-15 17:13

Summary

@angular/service-worker: Request Credential & Cache Policy Stripping

Details

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function.

During this reconstruction process, the helper function strips explicit client-defined safety parameters: the credentials configuration (such as credentials: 'omit') and the HTTP cache mode configuration (such as cache: 'no-store'). These are reverted back to standard browser-default parameters (credentials: 'same-origin' and default HTTP cache properties).

This causes the browser to include active credentials (such as cookies or Authorization headers) on outbound requests where the client-side developer explicitly instructed they should be omitted, leading to potential session leaks. Additionally, it causes private or non-cacheable resources to be cached by the service worker's engine, making private page states accessible or persistent inside the client's local cache post-logout.

Impact

Web applications registering the @angular/service-worker package are vulnerable to credential exposure or post-logout cache persistence if client-side code relies on fetch calls with explicit safety attributes (such as { credentials: 'omit' } or { cache: 'no-store' }) targeting paths matched by service worker asset groups.

By stripping these safety boundaries, the service worker exposes same-origin cookies and dynamic sensitive data to endpoints that should not receive them, or retains dynamic user sessions in cache storage where logout operations fail to fully evict user records.

Attack Preconditions

To successfully exploit this vulnerability, all of the following application states and parameters must concurrently exist: 1. Active Angular Service Worker: The target application uses @angular/service-worker and has an active registration of ngsw-worker.js inside the client's browser context. 2. Asset Group Matching: An assetGroups pattern in ngsw-config.json encompasses the target dynamic routing endpoint. 3. Established User Session: The victim user currently has an active authentication state, such as valid same-origin session cookies or auth headers stored by the browser. 4. Client-Side Safe Fetch Call: The application initiates an explicit fetch request to the route with safety parameters: { credentials: 'omit' } or specific cache control parameters (e.g. { cache: 'no-store' }).

Mitigations & Workarounds

If upgrading the @angular/service-worker package is not immediately feasible, developers should implement the following defensive measures: * Strict Cookie Configuration: Apply strict flags to session cookies (SameSite=Strict; Secure; HttpOnly) and ensure complete route isolation for credential-guarded secure resources. * Exclude Secure Endpoints from SW Config: Ensure that patterns targeting dynamic, secure endpoints are explicitly excluded from automatic asset groups or caching scopes in your ngsw-config.json. * Post-Logout Cache Invalidation: Programmatically purge the browser's Cache Storage API entries registered by the Angular Service Worker upon user logout: javascript if ('caches' in window) { caches.keys().then(names => { for (let name of names) { if (name.startsWith('ngsw:')) { caches.delete(name); } } }); }

Patches

22.0.0-rc.2
21.2.15
20.3.22
19.2.23

Severity

5.7 (Medium)


                  
                    CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "@angular/service-worker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "22.0.0-next.0"
            },
            {
              "fixed": "22.0.0-rc.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "@angular/service-worker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "21.0.0-next.0"
            },
            {
              "fixed": "21.2.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "@angular/service-worker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "20.0.0-next.0"
            },
            {
              "fixed": "20.3.22"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "@angular/service-worker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "19.0.0-next.0"
            },
            {
              "fixed": "19.2.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "@angular/service-worker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "18.2.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-50184"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200",
      "CWE-524"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-06-15T17:13:05Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "An issue in the `@angular/service-worker` package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new `Request` object using an internal helper function.\n\nDuring this reconstruction process, the helper function strips explicit client-defined safety parameters: the credentials configuration (such as `credentials: \u0027omit\u0027`) and the HTTP `cache` mode configuration (such as `cache: \u0027no-store\u0027`). These are reverted back to standard browser-default parameters (`credentials: \u0027same-origin\u0027` and default HTTP cache properties).\n\nThis causes the browser to include active credentials (such as cookies or Authorization headers) on outbound requests where the client-side developer explicitly instructed they should be omitted, leading to potential session leaks. Additionally, it causes private or non-cacheable resources to be cached by the service worker\u0027s engine, making private page states accessible or persistent inside the client\u0027s local cache post-logout.\n\n### Impact\nWeb applications registering the `@angular/service-worker` package are vulnerable to credential exposure or post-logout cache persistence if client-side code relies on fetch calls with explicit safety attributes (such as `{ credentials: \u0027omit\u0027 }` or `{ cache: \u0027no-store\u0027 }`) targeting paths matched by service worker asset groups. \n\nBy stripping these safety boundaries, the service worker exposes same-origin cookies and dynamic sensitive data to endpoints that should not receive them, or retains dynamic user sessions in cache storage where logout operations fail to fully evict user records.\n\n### Attack Preconditions\nTo successfully exploit this vulnerability, all of the following application states and parameters must concurrently exist:\n1. **Active Angular Service Worker:** The target application uses `@angular/service-worker` and has an active registration of `ngsw-worker.js` inside the client\u0027s browser context.\n2. **Asset Group Matching:** An `assetGroups` pattern in `ngsw-config.json` encompasses the target dynamic routing endpoint.\n3. **Established User Session:** The victim user currently has an active authentication state, such as valid same-origin session cookies or auth headers stored by the browser.\n4. **Client-Side Safe Fetch Call:** The application initiates an explicit fetch request to the route with safety parameters: `{ credentials: \u0027omit\u0027 }` or specific cache control parameters (e.g. `{ cache: \u0027no-store\u0027 }`).\n\n### Mitigations \u0026 Workarounds\nIf upgrading the `@angular/service-worker` package is not immediately feasible, developers should implement the following defensive measures:\n* **Strict Cookie Configuration:** Apply strict flags to session cookies (`SameSite=Strict; Secure; HttpOnly`) and ensure complete route isolation for credential-guarded secure resources.\n* **Exclude Secure Endpoints from SW Config:** Ensure that patterns targeting dynamic, secure endpoints are explicitly excluded from automatic asset groups or caching scopes in your `ngsw-config.json`.\n* **Post-Logout Cache Invalidation:** Programmatically purge the browser\u0027s Cache Storage API entries registered by the Angular Service Worker upon user logout:\n  ```javascript\n  if (\u0027caches\u0027 in window) {\n    caches.keys().then(names =\u003e {\n      for (let name of names) {\n        if (name.startsWith(\u0027ngsw:\u0027)) {\n          caches.delete(name);\n        }\n      }\n    });\n  }\n  ```\n### Patches\n- 22.0.0-rc.2\n- 21.2.15\n- 20.3.22\n- 19.2.23",
  "id": "GHSA-95qp-cmmw-mgqv",
  "modified": "2026-06-15T17:13:06Z",
  "published": "2026-06-15T17:13:05Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/angular/angular/security/advisories/GHSA-95qp-cmmw-mgqv"
    },
    {
      "type": "WEB",
      "url": "https://github.com/angular/angular/pull/68904"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/angular/angular"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "@angular/service-worker: Request Credential \u0026 Cache Policy Stripping"
}

WID-SEC-W-2026-1930

Vulnerability from csaf_certbund - Published: 2026-06-15 22:00 - Updated: 2026-06-15 22:00

Summary

Angular: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Angular ist ein TypeScript-basiertes Front-End-Webapplikationsframework. Es ist eine Weiterentwicklung des JavaScript basierten AngularJS.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Angular ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen, Daten zu manipulieren oder offenzulegen, Benutzer auf bösartige Websites umzuleiten oder Sitzungen zu kapern.

Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows

CVE-2026-50168

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50169

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50170

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50171

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50184

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50555

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50556

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-50557

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-52725

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-54264

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

CVE-2026-54267

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Open Source Angular <19.2.23 Open Source / Angular		<19.2.23
Open Source Angular <20.3.22 Open Source / Angular		<20.3.22
Open Source Angular <21.2.15 Open Source / Angular		<21.2.15
Open Source Angular <22.0.0-rc.2 Open Source / Angular		<22.0.0-rc.2
Open Source Angular <22.0.1 Open Source / Angular		<22.0.1
Open Source Angular <19.2.22 Open Source / Angular		<19.2.22
Open Source Angular <20.3.25 Open Source / Angular		<20.3.25
Open Source Angular <21.2.17 Open Source / Angular		<21.2.17

References

13 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://github.com/advisories/GHSA-692r-grfm-v8x7	external
https://github.com/advisories/GHSA-95qp-cmmw-mgqv	external
https://github.com/advisories/GHSA-f3m7-gqxr-g87x	external
https://github.com/advisories/GHSA-gv2q-mqqv-365m	external
https://github.com/advisories/GHSA-gxx4-3xcv-f8qx	external
https://github.com/advisories/GHSA-hqr9-c56f-3x7f	external
https://github.com/advisories/GHSA-p3vc-36g9-x9gr	external
https://github.com/advisories/GHSA-q6f4-qqrg-jv6x	external
https://github.com/advisories/GHSA-qxh6-94w6-9r5p	external
https://github.com/advisories/GHSA-rgjc-h3x7-9mwg	external
https://github.com/advisories/GHSA-xrxm-cp7j-8xf6	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Angular ist ein TypeScript-basiertes Front-End-Webapplikationsframework. Es ist eine Weiterentwicklung des JavaScript basierten AngularJS.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Angular ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Daten zu manipulieren oder offenzulegen, Benutzer auf b\u00f6sartige Websites umzuleiten oder Sitzungen zu kapern.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1930 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1930.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1930 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1930"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-692r-grfm-v8x7 vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-692r-grfm-v8x7"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-95qp-cmmw-mgqv vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-95qp-cmmw-mgqv"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-f3m7-gqxr-g87x vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-f3m7-gqxr-g87x"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-gv2q-mqqv-365m vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-gv2q-mqqv-365m"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-gxx4-3xcv-f8qx vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-gxx4-3xcv-f8qx"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-hqr9-c56f-3x7f vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-hqr9-c56f-3x7f"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-p3vc-36g9-x9gr vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-p3vc-36g9-x9gr"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-q6f4-qqrg-jv6x vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-q6f4-qqrg-jv6x"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-qxh6-94w6-9r5p vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-qxh6-94w6-9r5p"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-rgjc-h3x7-9mwg vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-rgjc-h3x7-9mwg"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-xrxm-cp7j-8xf6 vom 2026-06-15",
        "url": "https://github.com/advisories/GHSA-xrxm-cp7j-8xf6"
      }
    ],
    "source_lang": "en-US",
    "title": "Angular: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-15T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-16T09:04:52.763+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1930",
      "initial_release_date": "2026-06-15T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-06-15T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c22.0.1",
                "product": {
                  "name": "Open Source Angular \u003c22.0.1",
                  "product_id": "T055406"
                }
              },
              {
                "category": "product_version",
                "name": "22.0.1",
                "product": {
                  "name": "Open Source Angular 22.0.1",
                  "product_id": "T055406-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:22.0.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c22.0.0-rc.2",
                "product": {
                  "name": "Open Source Angular \u003c22.0.0-rc.2",
                  "product_id": "T055407"
                }
              },
              {
                "category": "product_version",
                "name": "22.0.0-rc.2",
                "product": {
                  "name": "Open Source Angular 22.0.0-rc.2",
                  "product_id": "T055407-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:22.0.0-rc.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c21.2.15",
                "product": {
                  "name": "Open Source Angular \u003c21.2.15",
                  "product_id": "T055408"
                }
              },
              {
                "category": "product_version",
                "name": "21.2.15",
                "product": {
                  "name": "Open Source Angular 21.2.15",
                  "product_id": "T055408-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:21.2.15"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c20.3.22",
                "product": {
                  "name": "Open Source Angular \u003c20.3.22",
                  "product_id": "T055409"
                }
              },
              {
                "category": "product_version",
                "name": "20.3.22",
                "product": {
                  "name": "Open Source Angular 20.3.22",
                  "product_id": "T055409-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:20.3.22"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c19.2.23",
                "product": {
                  "name": "Open Source Angular \u003c19.2.23",
                  "product_id": "T055410"
                }
              },
              {
                "category": "product_version",
                "name": "19.2.23",
                "product": {
                  "name": "Open Source Angular 19.2.23",
                  "product_id": "T055410-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:19.2.23"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c21.2.17",
                "product": {
                  "name": "Open Source Angular \u003c21.2.17",
                  "product_id": "T055411"
                }
              },
              {
                "category": "product_version",
                "name": "21.2.17",
                "product": {
                  "name": "Open Source Angular 21.2.17",
                  "product_id": "T055411-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:21.2.17"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c20.3.25",
                "product": {
                  "name": "Open Source Angular \u003c20.3.25",
                  "product_id": "T055412"
                }
              },
              {
                "category": "product_version",
                "name": "20.3.25",
                "product": {
                  "name": "Open Source Angular 20.3.25",
                  "product_id": "T055412-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:20.3.25"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c19.2.22",
                "product": {
                  "name": "Open Source Angular \u003c19.2.22",
                  "product_id": "T055413"
                }
              },
              {
                "category": "product_version",
                "name": "19.2.22",
                "product": {
                  "name": "Open Source Angular 19.2.22",
                  "product_id": "T055413-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:angular:angular:19.2.22"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Angular"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50168",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50168"
    },
    {
      "cve": "CVE-2026-50169",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50169"
    },
    {
      "cve": "CVE-2026-50170",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50170"
    },
    {
      "cve": "CVE-2026-50171",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50171"
    },
    {
      "cve": "CVE-2026-50184",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50184"
    },
    {
      "cve": "CVE-2026-50555",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50555"
    },
    {
      "cve": "CVE-2026-50556",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50556"
    },
    {
      "cve": "CVE-2026-50557",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-50557"
    },
    {
      "cve": "CVE-2026-52725",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-52725"
    },
    {
      "cve": "CVE-2026-54264",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-54264"
    },
    {
      "cve": "CVE-2026-54267",
      "product_status": {
        "known_affected": [
          "T055410",
          "T055409",
          "T055408",
          "T055407",
          "T055406",
          "T055413",
          "T055412",
          "T055411"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-54267"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-50184 (GCVE-0-2026-50184)

GHSA-95QP-CMMW-MGQV

Impact

Attack Preconditions

Mitigations & Workarounds

Patches

WID-SEC-W-2026-1930

Tags

Sightings

Nomenclature