AIKIDO-2026-977949
@angular/common is vulnerable to Information Disclosure
65
Medium Risk
This Affects:
@angular/commonTL;DR
Angular's HttpTransferCache serializes HTTP responses made during server-side rendering into TransferState so they can be reused during client hydration. The cache skips responses tied to credentialed requests and certain Cache-Control directives, but it still caches responses that carry a Set-Cookie header. When these user- or session-specific responses are embedded into the SSR HTML and that HTML is stored by a shared cache or CDN, one user's data can be disclosed to other users. The fix skips transfer caching for any response that includes a Set-Cookie header.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application uses server-side rendering with hydration behind a shared cache or CDN.
Background info
@angular/common is vulnerable to Information Disclosure in versions 16.0.0 - 20.3.25, 21.0.0 - 21.2.17 and 22.0.0 - 22.0.2.
How to fix this
Upgrade the @angular/common library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant