tocsin

npm/@angular/common CVE-2026-111753: medium

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

Action: Upgrade @angular/common to 20.3.34 or later.

npm i @angular/common@21.0.3
npm i @angular/common@20.3.34

Affected

introducedfixedlast affected
21.0.021.0.3-
20.0.020.3.34-
0-19.2.25

Fixed versions

21.0.320.3.34

Sources

CVE-2026-111753 · published · modified · JSON