CVE-2026-68945

HIGH

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-68945 has a selected CVSS score of 8.8 (high).

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.2.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 3, 2026 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

common

Browse @angular / common
CVE List< 20.3.27affected
>= 21.0.0-next.0, < 21.2.19affected
>= 22.0.0-next.0, < 22.0.2affected

angular

Browse angular / angular
CVE List< 20.3.27affected
>= 21.0.0-next.0, < 21.2.19affected
>= 22.0.0-next.0, < 22.0.2affected

@angular/common

Browse npm / @angular/common
GitHub Advisory22.0.0-next.0 to < 22.0.2 · Fixed in 22.0.2affected
21.0.0-next.0 to < 21.2.19 · Fixed in 21.2.19affected
20.0.0-next.0 to < 20.3.27 · Fixed in 20.3.27affected
Through 19.2.25affected

References

7