VYPR

HttpClient

by Angular

CVEs (1)

  • CVE-2026-111753Oct 20, 2026
    risk 0.00cvss —epss —

    An incomplete fix for [GHSA-58c5-g7wp-6w37](https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37) (`CVE-2025-66035`) in `@angular/common`'s HTTP Client (`HttpClient`) allows Cross-Site Request Forgery (XSRF) tokens to be leaked to attacker-controlled…