CVE-2026-68945 Details

A vulnerability exists in Angular's HttpTransferCache component, affecting versions prior to 20.3.27, 21.2.19, and 22.0.2. The issue arises because the transfer cache improperly handles repeated request parameters, leading to the same cache key being generated for different HttpClient requests. This allows distinct requests to inadvertently share cached responses, potentially causing incorrect data to be used in subsequent application logic. In server-side rendered (SSR) applications, this could result in security-sensitive requests receiving inappropriate responses from the cache, based on earlier requests with different parameters.

Upgrade to Angular versions 20.3.27, 21.2.19, or 22.0.2. If an immediate upgrade is not possible, configure HttpClient requests to skip transfer caching for sensitive endpoints that use repeated parameter keys, or disable the HTTP transfer cache globally in the application bootstrap configuration.