Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an information disclosure vulnerability exists in the @angular/service-worker package of the Angular framework. When the Service Worker fetches assets, it preserves metadata (such as headers) from the original request. However, on cross-origin redirects, the Service Worker fails to strip sensitive headers, violating the Fetch redirect algorithm. This allows a remote attacker to obtain sensitive credentials (e.g., Authorization tokens, Proxy-Authorization credentials, or session cookies) by triggering a cross-origin redirect to an untrusted external origin. This vulnerability is fixed in 22.0.1, 21.2.17, and 20.3.25.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Angular is a development platform for building mobile and desktop web applications using     TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an information     disclosure vulnerability exists in the @angular/service-worker package of the Angular framework. When the     Service Worker fetches assets, it preserves metadata (such as headers) from the original request. However,     on cross-origin redirects, the Service Worker fails to strip sensitive headers, violating the Fetch     redirect algorithm. This allows a remote attacker to obtain sensitive credentials (e.g., Authorization     tokens, Proxy-Authorization credentials, or session cookies) by triggering a cross-origin redirect to an     untrusted external origin. This vulnerability is fixed in 22.0.1, 21.2.17, and 20.3.25. (CVE-2026-54264)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Angular is a development platform for building mobile and desktop web applications using
    TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an information
    disclosure vulnerability exists in the @angular/service-worker package of the Angular framework. When the
    Service Worker fetches assets, it preserves metadata (such as headers) from the original request. However,
    on cross-origin redirects, the Service Worker fails to strip sensitive headers, violating the Fetch
    redirect algorithm. This allows a remote attacker to obtain sensitive credentials (e.g., Authorization
    tokens, Proxy-Authorization credentials, or session cookies) by triggering a cross-origin redirect to an
    untrusted external origin. This vulnerability is fixed in 22.0.1, 21.2.17, and 20.3.25. (CVE-2026-54264)

ID	Name	Product	Family	Type	Severity
322243	Linux Distros Unpatched Vulnerability : CVE-2026-54264	Nessus	Misc.	Local	high
443201	SCA: security update for @angular/service-worker (GHSA-qxh6-94w6-9r5p)	Tenable Cloud Security	SCA Checks	Local	high
443201	SCA: security update for @angular/service-worker (GHSA-qxh6-94w6-9r5p)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-54264

high

Tenable Plugins

high

high

high