Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a vulnerability was discovered in @angular/common when Server-Side Rendering (SSR) and hydration are enabled. The HttpTransferCache utility optimizes hydration by caching outgoing HTTP requests performed during SSR and transferring the cached state to the client-side application via TransferState. However, the caching mechanism fails to inspect the withCredentials flag or the Cookie header of outgoing requests. As a result, credentialed, user-specific responses may be cached by default in the shared TransferState payload. When these responses are serialized into the HTML, any caching layer (such as a CDN, reverse proxy, or shared server cache) that caches the SSR-rendered HTML page could inadvertently cache and leak one user's private data to other users, leading to a high-severity information disclosure vulnerability. This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Angular is a development platform for building mobile and desktop web applications using     TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a     vulnerability was discovered in @angular/common when Server-Side Rendering (SSR) and hydration are     enabled. The HttpTransferCache utility optimizes hydration by caching outgoing HTTP requests performed     during SSR and transferring the cached state to the client-side application via TransferState. However,     the caching mechanism fails to inspect the withCredentials flag or the Cookie header of outgoing requests.
    As a result, credentialed, user-specific responses may be cached by default in the shared TransferState     payload. When these responses are serialized into the HTML, any caching layer (such as a CDN, reverse     proxy, or shared server cache) that caches the SSR-rendered HTML page could inadvertently cache and leak     one user's private data to other users, leading to a high-severity information disclosure vulnerability.
    This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23. (CVE-2026-50170)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Angular is a development platform for building mobile and desktop web applications using
    TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a
    vulnerability was discovered in @angular/common when Server-Side Rendering (SSR) and hydration are
    enabled. The HttpTransferCache utility optimizes hydration by caching outgoing HTTP requests performed
    during SSR and transferring the cached state to the client-side application via TransferState. However,
    the caching mechanism fails to inspect the withCredentials flag or the Cookie header of outgoing requests.
    As a result, credentialed, user-specific responses may be cached by default in the shared TransferState
    payload. When these responses are serialized into the HTML, any caching layer (such as a CDN, reverse
    proxy, or shared server cache) that caches the SSR-rendered HTML page could inadvertently cache and leak
    one user's private data to other users, leading to a high-severity information disclosure vulnerability.
    This vulnerability is fixed in 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23. (CVE-2026-50170)

ID	Name	Product	Family	Type	Severity
322255	Linux Distros Unpatched Vulnerability : CVE-2026-50170	Nessus	Misc.	Local	high
443210	SCA: security update for @angular/common (GHSA-q6f4-qqrg-jv6x)	Tenable Cloud Security	SCA Checks	Local	high
443210	SCA: security update for @angular/common (GHSA-q6f4-qqrg-jv6x)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-50170

high

Tenable Plugins

high

high

high