@angular/common, HttpTransferCache Authentication Bypass, CVE-2026-50170 -DC-Sep2026-2330

Listen to this Post

CVE-2026-50170 affected @angular/common when SSR and hydration were enabled.

HttpTransferCache cached outgoing HTTP requests during SSR.

Cached state transferred to client via TransferState.

TransferState serialized as JSON in
Scroll to Top