Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2026-88059 - Vulnerability Database
Angular

Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2026-88059

Medium
Reference: CVE-2026-88059
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-88059
Title: Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28 21.2.20 and 22.1.1 Angulars angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering (SSR) and hydration use a hierarchical HttpClient configured with withRequestsMadeViaParent. The child TransferCache evaluates an initially anonymous request before delegation then a parent withInterceptors chain adds an