Information Disclosure

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLsCVE-2025-66035angular · CVSS 7.7 · 0.7% likely

   CWE-201

2. Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)CVE-2026-111753angular · CVSS 5.9 · 0.5% likely

   CWE-201

3. Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCacheCVE-2026-50170angular · CVSS 8.2 · 0.4% likely

   CWE-524

4. Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service WorkerCVE-2026-54264angular · CVSS 8.3 · 0.4% likely

   CWE-359

5. Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`CVE-2026-88059angular · CVSS 4 · 0.3% likely

   CWE-200

6. Angular Service Worker Policy-Bypass & Credential-Stripping VulnerabilitiesCVE-2026-50169angular · CVSS 5.7 · 0.2% likely

   CWE-200

7. Angular: Request Credential & Cache Policy Stripping in Angular Service WorkerCVE-2026-50184angular · CVSS 5.7 · 0.2% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.