npm/@nguniversal/common CVE-2025-59052: high 7.1, EPSS 0.36%
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.0.0-next.0 | - | 16.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-68x2-mx4q-78m7#npm/@nguniversal/common
- nvd: CVE-2025-59052
- https://github.com/angular/angular/security/advisories/GHSA-68x2-mx4q-78m7
- https://github.com/angular/angular-cli/pull/31108
- https://github.com/angular/angular/pull/63562
- https://github.com/angular/angular
CVE-2025-59052 · published · modified · JSON