{"schema_version":"1.7.5","id":"CVE-2025-66035","published":"2025-11-26T22:18:35.692Z","modified":"2026-04-02T13:18:55.372238Z","aliases":["GHSA-58c5-g7wp-6w37"],"summary":"Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs","details":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/angular/angular","events":[{"introduced":"0"},{"fixed":"0276479e7d0e280e0f8d26fa567d3b7aa97a516f"}]},{"type":"GIT","repo":"https://github.com/angular/angular","events":[{"introduced":"0"},{"fixed":"05fe6686a97fa0bcd3cf157805b3612033f975bc"}]},{"type":"GIT","repo":"https://github.com/angular/angular","events":[{"introduced":"0"},{"fixed":"3240d856d942727372a705252f7c8c115394a41e"}]},{"type":"GIT","repo":"https://github.com/angular/angular","events":[{"introduced":"0"},{"fixed":"92db2bac88141b8b161d9de04944b64bf2ce6e13"}]},{"type":"GIT","repo":"https://github.com/angular/angular","events":[{"introduced":"0"},{"fixed":"136e9232c4e7285e163b7683e8725a93ef8bd599"}]},{"type":"GIT","repo":"https://github.com/angular/angular","events":[{"introduced":"0"},{"fixed":"eaa68c4cd75b69796ea085192597bdfdc0359e71"}]}],"versions":["10.0.0","10.0.0-next.0","10.0.0-next.1","10.0.0-next.2","10.0.0-next.3","10.0.0-next.4","10.0.0-next.5","10.0.0-next.6","10.0.0-next.7","10.0.0-next.8","10.0.0-next.9","10.0.0-rc.0","10.0.0-rc.2","10.0.0-rc.3","10.0.0-rc.4","10.0.0-rc.5","10.0.0-rc.6","10.0.1","10.0.10","10.0.11","10.0.12","10.0.13","10.0.14","10.0.2","10.0.3","10.0.4","10.0.5","10.0.6","10.0.7","10.0.8","10.0.9","10.1.0","10.1.0-next.0","10.1.0-next.1","10.1.0-next.2","10.1.0-next.3","10.1.0-next.4","10.1.0-next.5","10.1.0-next.6","10.1.0-next.7","10.1.0-next.8","10.1.0-rc.0","10.1.1","10.1.2","10.1.3","10.1.4","10.1.5","10.1.6","10.2.0","10.2.1","10.2.2","10.2.3","10.2.4","10.2.5","11.0.0","11.0.0-next.0","11.0.0-next.1","11.0.0-next.2","11.0.0-next.3","11.0.0-next.4","11.0.0-next.5","11.0.0-next.6","11.0.0-rc.0","11.0.0-rc.1","11.0.0-rc.2","11.0.0-rc.3","11.0.1","11.0.2","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","11.0.9","11.1.0","11.1.0-next.0","11.1.0-next.1","11.1.0-next.2","11.1.0-next.3","11.1.0-next.4","11.1.0-next.5","11.1.0-rc.0","11.1.1","11.1.2","11.2.0","11.2.0-next.0","11.2.0-next.1","11.2.0-rc.0","11.2.1","11.2.10","11.2.11","11.2.12","11.2.13","11.2.14","11.2.2","11.2.3","11.2.4","11.2.5","11.2.6","11.2.7","11.2.8","11.2.9","12.0.0","12.0.0-next.0","12.0.0-next.1","12.0.0-next.2","12.0.0-next.3","12.0.0-next.4","12.0.0-next.5","12.0.0-next.6","12.0.0-next.7","12.0.0-next.8","12.0.0-next.9","12.0.0-rc.0","12.0.0-rc.1","12.0.0-rc.2","12.0.0-rc.3","12.0.1","12.0.2","12.0.3","12.0.4","12.0.5","12.1.0","12.1.0-next.2","12.1.0-next.3","12.1.0-next.4","12.1.0-next.5","12.1.0-next.6","12.1.1","12.1.2","12.1.3","12.1.4","12.1.5","12.2.0","12.2.0-next.0","12.2.0-next.1","12.2.0-next.2","12.2.0-next.3","12.2.0-rc.0","12.2.1","12.2.10","12.2.11","12.2.12","12.2.13","12.2.14","12.2.15","12.2.16","12.2.17","12.2.2","12.2.3","12.2.4","12.2.5","12.2.6","12.2.7","12.2.8","12.2.9","13.0.0","13.0.0-next.0","13.0.0-next.1","13.0.0-next.10","13.0.0-next.11","13.0.0-next.12","13.0.0-next.13","13.0.0-next.14","13.0.0-next.15","13.0.0-next.2","13.0.0-next.3","13.0.0-next.4","13.0.0-next.5","13.0.0-next.6","13.0.0-next.7","13.0.0-next.8","13.0.0-next.9","13.0.0-rc.0","13.0.0-rc.1","13.0.0-rc.2","13.0.0-rc.3","13.0.1","13.0.2","13.0.3","13.1.0","13.1.0-next.0","13.1.0-next.1","13.1.0-next.2","13.1.0-next.3","13.1.1","13.1.2","13.1.3","13.2.0","13.2.0-next.0","13.2.0-next.1","13.2.0-next.2","13.2.0-rc.0","13.2.0-rc.1","13.2.1","13.2.2","13.2.3","13.2.4","13.2.5","13.2.6","13.2.7","13.3.0","13.3.0-next.0","13.3.0-rc.0","13.3.1","13.3.10","13.3.11","13.3.12","13.3.2","13.3.3","13.3.4","13.3.5","13.3.6","13.3.7","13.3.8","13.3.9","13.4.0","14.0.0","14.0.0-next.0","14.0.0-next.1","14.0.0-next.10","14.0.0-next.11","14.0.0-next.12","14.0.0-next.13","14.0.0-next.14","14.0.0-next.15","14.0.0-next.16","14.0.0-next.2","14.0.0-next.3","14.0.0-next.4","14.0.0-next.5","14.0.0-next.6","14.0.0-next.7","14.0.0-next.8","14.0.0-next.9","14.0.0-rc.0","14.0.0-rc.1","14.0.0-rc.2","14.0.0-rc.3","14.0.1","14.0.2","14.0.3","14.0.4","14.0.5","14.0.6","14.0.7","14.1.0","14.1.0-next.0","14.1.0-next.1","14.1.0-next.2","14.1.0-next.3","14.1.0-next.4","14.1.0-rc.0","14.1.1","14.1.2","14.1.3","14.2.0","14.2.0-next.0","14.2.0-next.1","14.2.0-rc.0","14.2.1","14.2.10","14.2.11","14.2.12","14.2.2","14.2.3","14.2.4","14.2.5","14.2.6","14.2.7","14.2.8","14.2.9","14.3.0","15.0.0","15.0.0-next.0","15.0.0-next.1","15.0.0-next.2","15.0.0-next.3","15.0.0-next.4","15.0.0-next.5","15.0.0-next.6","15.0.0-rc.0","15.0.0-rc.1","15.0.0-rc.2","15.0.0-rc.3","15.0.0-rc.4","15.0.1","15.0.2","15.0.3","15.0.4","15.1.0","15.1.0-next.0","15.1.0-next.1","15.1.0-next.2","15.1.0-next.3","15.1.0-rc.0","15.1.1","15.1.2","15.1.3","15.1.4","15.1.5","15.2.0","15.2.0-next.0","15.2.0-next.1","15.2.0-next.2","15.2.0-next.3","15.2.0-next.4","15.2.0-rc.0","15.2.1","15.2.10","15.2.2","15.2.3","15.2.4","15.2.5","15.2.6","15.2.7","15.2.8","15.2.9","16.0.0","16.0.0-next.0","16.0.0-next.1","16.0.0-next.2","16.0.0-next.3","16.0.0-next.4","16.0.0-next.5","16.0.0-next.6","16.0.0-next.7","16.0.0-rc.0","16.0.0-rc.1","16.0.0-rc.2","16.0.0-rc.3","16.0.0-rc.4","16.0.1","16.0.2","16.0.3","16.0.4","16.0.5","16.0.6","16.1.0","16.1.0-next.0","16.1.0-next.1","16.1.0-next.2","16.1.0-next.3","16.1.0-rc.0","16.1.1","16.1.2","16.1.3","16.1.4","16.1.5","16.1.6","16.1.7","16.1.8","16.1.9","16.2.0","16.2.0-next.0","16.2.0-next.1","16.2.0-next.2","16.2.0-next.3","16.2.0-next.4","16.2.0-rc.0","16.2.1","16.2.10","16.2.11","16.2.12","16.2.2","16.2.3","16.2.4","16.2.5","16.2.6","16.2.7","16.2.8","16.2.9","17.0.0","17.0.0-next.0","17.0.0-next.1","17.0.0-next.2","17.0.0-next.3","17.0.0-next.4","17.0.0-next.5","17.0.0-next.6","17.0.0-next.7","17.0.0-next.8","17.0.0-rc.0","17.0.0-rc.1","17.0.0-rc.2","17.0.0-rc.3","17.0.1","17.0.2","17.0.3","17.0.4","17.0.5","17.0.6","17.0.7","17.0.8","17.0.9","17.1.0","17.1.0-next.0","17.1.0-next.1","17.1.0-next.2","17.1.0-next.3","17.1.0-next.4","17.1.0-next.5","17.1.0-rc.0","17.1.1","17.1.2","17.1.3","17.2.0","17.2.0-next.0","17.2.0-next.1","17.2.0-rc.0","17.2.0-rc.1","17.2.1","17.2.2","17.2.3","17.2.4","17.3.0","17.3.0-next.0","17.3.0-next.1","17.3.0-rc.0","17.3.1","17.3.10","17.3.11","17.3.12","17.3.2","17.3.3","17.3.4","17.3.5","17.3.6","17.3.7","17.3.8","17.3.9","18.0.0","18.0.0-next.0","18.0.0-next.1","18.0.0-next.2","18.0.0-next.3","18.0.0-next.4","18.0.0-next.5","18.0.0-next.6","18.0.0-rc.0","18.0.0-rc.1","18.0.0-rc.2","18.0.0-rc.3","18.0.1","18.0.2","18.0.3","18.0.4","18.0.5","18.0.6","18.0.7","18.1.0","18.1.0-next.0","18.1.0-next.1","18.1.0-next.2","18.1.0-next.3","18.1.0-next.4","18.1.0-rc.0","18.1.1","18.1.2","18.1.3","18.1.4","18.1.5","18.2.0","18.2.0-next.0","18.2.0-next.1","18.2.0-next.2","18.2.0-next.3","18.2.0-next.4","18.2.0-rc.0","18.2.1","18.2.10","18.2.11","18.2.12","18.2.13","18.2.14","18.2.2","18.2.3","18.2.4","18.2.5","18.2.6","18.2.7","18.2.8","18.2.9","19.0.0","19.0.0-next.0","19.0.0-next.1","19.0.0-next.10","19.0.0-next.11","19.0.0-next.2","19.0.0-next.3","19.0.0-next.4","19.0.0-next.5","19.0.0-next.6","19.0.0-next.7","19.0.0-next.8","19.0.0-next.9","19.0.0-rc.0","19.0.0-rc.1","19.0.0-rc.2","19.0.0-rc.3","19.0.1","19.0.2","19.0.3","19.0.4","19.0.5","19.0.6","19.0.7","19.1.0","19.1.0-next.0","19.1.0-next.1","19.1.0-next.2","19.1.0-next.3","19.1.0-next.4","19.1.0-rc.0","19.1.1","19.1.2","19.1.3","19.1.4","19.1.5","19.1.6","19.1.7","19.1.8","19.2.0","19.2.0-next.0","19.2.0-next.1","19.2.0-next.2","19.2.0-next.3","19.2.0-rc.0","19.2.1","19.2.10","19.2.11","19.2.12","19.2.13","19.2.14","19.2.15","19.2.16","19.2.17","19.2.2","19.2.3","19.2.4","19.2.5","19.2.6","19.2.7","19.2.8","19.2.9","2.0.0","2.0.0-alpha.13","2.0.0-alpha.14","2.0.0-alpha.15","2.0.0-alpha.16","2.0.0-alpha.17","2.0.0-alpha.18","2.0.0-alpha.19","2.0.0-alpha.20","2.0.0-alpha.21","2.0.0-alpha.22","2.0.0-alpha.23","2.0.0-alpha.24","2.0.0-alpha.25","2.0.0-alpha.26","2.0.0-alpha.27","2.0.0-alpha.28","2.0.0-alpha.29","2.0.0-alpha.30","2.0.0-alpha.31","2.0.0-alpha.32","2.0.0-alpha.33","2.0.0-alpha.34","2.0.0-alpha.35","2.0.0-alpha.36","2.0.0-alpha.37","2.0.0-alpha.38","2.0.0-alpha.39","2.0.0-alpha.40","2.0.0-alpha.41","2.0.0-alpha.42","2.0.0-alpha.44","2.0.0-alpha.45","2.0.0-alpha.46","2.0.0-alpha.47","2.0.0-alpha.48","2.0.0-alpha.49","2.0.0-alpha.50","2.0.0-alpha.51","2.0.0-alpha.52","2.0.0-alpha.53","2.0.0-alpha.54","2.0.0-alpha.55","2.0.0-beta.0","2.0.0-beta.1","2.0.0-beta.10","2.0.0-beta.11","2.0.0-beta.12","2.0.0-beta.13","2.0.0-beta.14","2.0.0-beta.15","2.0.0-beta.16","2.0.0-beta.17","2.0.0-beta.2","2.0.0-beta.3","2.0.0-beta.4","2.0.0-beta.5","2.0.0-beta.6","2.0.0-beta.7","2.0.0-beta.8","2.0.0-beta.9","2.0.0-rc.0","2.0.0-rc.1","2.0.0-rc.2","2.0.0-rc.3","2.0.0-rc.4","2.0.0-rc.5","2.0.0-rc.6","2.0.0-rc.7","2.0.1","2.0.2","2.1.0","2.1.0-beta.0","2.1.0-rc.0","2.1.1","2.1.2","2.2.0","2.2.0-beta.0","2.2.0-beta.1","2.2.0-rc.0","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-beta.0","2.3.0-beta.1","2.3.0-rc.0","2.3.1","2.4.0","2.4.0-marker","2.4.1","2.4.10","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.4.7","2.4.8","2.4.9","20.0.0","20.0.0-next.0","20.0.0-next.1","20.0.0-next.2","20.0.0-next.3","20.0.0-next.4","20.0.0-next.5","20.0.0-next.6","20.0.0-next.7","20.0.0-next.8","20.0.0-next.9","20.0.0-rc.0","20.0.0-rc.1","20.0.0-rc.2","20.0.0-rc.3","20.0.1","20.0.2","20.0.3","20.0.4","20.0.5","20.0.6","20.0.7","20.1.0","20.1.0-next.0","20.1.0-next.1","20.1.0-next.2","20.1.0-next.3","20.1.0-rc.0","20.1.1","20.1.2","20.1.3","20.1.4","20.1.5","20.1.6","20.1.7","20.1.8","20.2.0","20.2.0-next.0","20.2.0-next.1","20.2.0-next.2","20.2.0-next.3","20.2.0-next.4","20.2.0-next.5","20.2.0-next.6","20.2.0-rc.0","20.2.0-rc.1","20.2.1","20.2.2","20.2.3","20.2.4","20.3.0","20.3.0-rc.0","20.3.1","20.3.10","20.3.11","20.3.12","20.3.13","20.3.14","20.3.15","20.3.2","20.3.3","20.3.4","20.3.5","20.3.6","20.3.7","20.3.8","20.3.9","21.0.0","21.0.0-next.0","21.0.0-next.1","21.0.0-next.10","21.0.0-next.2","21.0.0-next.3","21.0.0-next.4","21.0.0-next.5","21.0.0-next.6","21.0.0-next.7","21.0.0-next.8","21.0.0-next.9","21.0.0-rc.0","21.0.0-rc.1","21.0.0-rc.2","21.0.0-rc.3","21.0.1","21.0.2","21.0.3","21.1.0-next.0","21.1.0-next.1","4.0.0","4.0.0-beta.0","4.0.0-beta.1","4.0.0-beta.2","4.0.0-beta.3","4.0.0-beta.4","4.0.0-beta.5","4.0.0-beta.6","4.0.0-beta.7","4.0.0-beta.8","4.0.0-rc.1","4.0.0-rc.2","4.0.0-rc.3","4.0.0-rc.4","4.0.0-rc.5","4.0.0-rc.6","4.0.1","4.0.2","4.0.3","4.1.0","4.1.0-beta.0","4.1.0-beta.1","4.1.0-rc.0","4.1.1","4.1.2","4.1.3","4.2.0","4.2.0-beta.0","4.2.0-beta.1","4.2.0-rc.0","4.2.0-rc.1","4.2.0-rc.2","4.2.1","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.3.0","4.3.0-beta.0","4.3.0-beta.1","4.3.0-rc.0","4.3.1","4.3.2","4.3.3","4.3.4","4.3.5","4.3.6","4.4.0","4.4.0-RC.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","5.0.0","5.0.0-beta.0","5.0.0-beta.1","5.0.0-beta.2","5.0.0-beta.3","5.0.0-beta.4","5.0.0-beta.5","5.0.0-beta.6","5.0.0-beta.7","5.0.0-rc.0","5.0.0-rc.1","5.0.0-rc.2","5.0.0-rc.3","5.0.0-rc.4","5.0.0-rc.5","5.0.0-rc.6","5.0.0-rc.7","5.0.0-rc.8","5.0.0-rc.9","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.1.0","5.1.0-beta.0","5.1.0-beta.1","5.1.0-beta.2","5.1.0-rc.0","5.1.0-rc.1","5.1.1","5.1.2","5.1.3","5.2.0","5.2.0-beta.0","5.2.0-beta.1","5.2.0-rc.0","5.2.1","5.2.10","5.2.11","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.0-beta.0","6.0.0-beta.1","6.0.0-beta.2","6.0.0-beta.3","6.0.0-beta.4","6.0.0-beta.5","6.0.0-beta.6","6.0.0-beta.7","6.0.0-beta.8","6.0.0-rc.0","6.0.0-rc.1","6.0.0-rc.2","6.0.0-rc.3","6.0.0-rc.4","6.0.0-rc.5","6.0.0-rc.6","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8","6.0.9","6.1.0","6.1.0-beta.0","6.1.0-beta.1","6.1.0-beta.2","6.1.0-beta.3","6.1.0-rc.0","6.1.0-rc.3","6.1.1","6.1.10","6.1.2","6.1.3","6.1.4","6.1.5","6.1.6","6.1.7","6.1.8","6.1.9","7.0.0","7.0.0-beta.0","7.0.0-beta.1","7.0.0-beta.2","7.0.0-beta.3","7.0.0-beta.4","7.0.0-beta.5","7.0.0-beta.6","7.0.0-beta.7","7.0.0-rc.0","7.0.0-rc.1","7.0.1","7.0.2","7.0.3","7.0.4","7.1.0","7.1.0-beta.0","7.1.0-beta.1","7.1.0-beta.2","7.1.0-rc.0","7.1.1","7.1.2","7.1.3","7.1.4","7.2.0","7.2.0-beta.0","7.2.0-beta.1","7.2.0-beta.2","7.2.0-rc.0","7.2.1","7.2.10","7.2.11","7.2.12","7.2.13","7.2.14","7.2.15","7.2.16","7.2.2","7.2.3","7.2.4","7.2.5","7.2.6","7.2.7","7.2.8","7.2.9","8.0.0","8.0.0-beta.0","8.0.0-beta.1","8.0.0-beta.10","8.0.0-beta.11","8.0.0-beta.12","8.0.0-beta.13","8.0.0-beta.14","8.0.0-beta.2","8.0.0-beta.3","8.0.0-beta.4","8.0.0-beta.5","8.0.0-beta.6","8.0.0-beta.7","8.0.0-beta.8","8.0.0-beta.9","8.0.0-rc.0","8.0.0-rc.1","8.0.0-rc.2","8.0.0-rc.3","8.0.0-rc.4","8.0.0-rc.5","8.0.1","8.0.2","8.0.3","8.1.0","8.1.0-beta.0","8.1.0-next.1","8.1.0-next.2","8.1.0-next.3","8.1.0-rc.0","8.1.1","8.1.2","8.1.3","8.2.0","8.2.0-next.0","8.2.0-next.1","8.2.0-next.2","8.2.0-rc.0","8.2.1","8.2.10","8.2.11","8.2.12","8.2.13","8.2.14","8.2.2","8.2.3","8.2.4","8.2.5","8.2.6","8.2.7","8.2.8","8.2.9","9.0.0","9.0.0-next.0","9.0.0-next.1","9.0.0-next.10","9.0.0-next.11","9.0.0-next.12","9.0.0-next.13","9.0.0-next.14","9.0.0-next.15","9.0.0-next.2","9.0.0-next.3","9.0.0-next.4","9.0.0-next.5","9.0.0-next.6","9.0.0-next.7","9.0.0-next.8","9.0.0-next.9","9.0.0-rc.0","9.0.0-rc.1","9.0.0-rc.10","9.0.0-rc.11","9.0.0-rc.12","9.0.0-rc.13","9.0.0-rc.14","9.0.0-rc.2","9.0.0-rc.3","9.0.0-rc.4","9.0.0-rc.5","9.0.0-rc.6","9.0.0-rc.7","9.0.0-rc.8","9.0.0-rc.9","9.0.1","9.0.2","9.0.3","9.0.4","9.0.5","9.0.6","9.0.7","9.1.0","9.1.0-next.0","9.1.0-next.1","9.1.0-next.2","9.1.0-next.3","9.1.0-next.4","9.1.0-next.5","9.1.0-rc.0","9.1.0-rc.1","9.1.0-rc.2","9.1.1","9.1.10","9.1.11","9.1.12","9.1.13","9.1.2","9.1.3","9.1.4","9.1.5","9.1.6","9.1.7","9.1.8","9.1.9","ngcontainer_0.3.0","ngcontainer_0.3.1","ngcontainer_0.3.2","ngcontainer_0.3.3","ngcontainer_0.4.0","ngcontainer_0.5.0","ngcontainer_0.9.0","patch_sync","starting","v10.2.5","v19.2.18","v19.2.19","v19.2.20","v20.3.16","v20.3.17","v20.3.18","v21.0.4","v21.0.5","v21.0.6","v21.0.7","v21.0.8","v21.0.9","v21.1.0","v21.1.0-next.2","v21.1.0-next.3","v21.1.0-next.4","v21.1.0-rc.0","v21.1.1","v21.1.2","v21.1.3","v21.1.4","v21.1.5","v21.1.6","v21.2.0","v21.2.0-next.0","v21.2.0-next.1","v21.2.0-next.2","v21.2.0-next.3","v21.2.0-rc.0","v21.2.1","v21.2.2","v21.2.3","v21.2.4","v21.2.5","v21.2.6","v21.2.7","v22.0.0-next.0","v22.0.0-next.1","v22.0.0-next.2","v22.0.0-next.3","v22.0.0-next.4","v22.0.0-next.5","v22.0.0-next.6","vsix-20.3.3","vsix-21.0.0","vsix-21.0.1","vsix-21.1.0","vsix-21.1.1","vsix-21.2.0","vsix-21.2.1","vsix-21.2.2","vsix-21.2.3","zone.js-0.10.0","zone.js-0.10.1","zone.js-0.10.2","zone.js-0.10.3","zone.js-0.11.0","zone.js-0.11.2","zone.js-0.11.3","zone.js-0.11.4","zone.js-0.11.5","zone.js-0.11.6","zone.js-0.11.7","zone.js-0.11.8","zone.js-0.12.0","zone.js-0.13.0","zone.js-0.13.1","zone.js-0.13.2","zone.js-0.13.3","zone.js-0.14.0","zone.js-0.14.1","zone.js-0.14.10","zone.js-0.14.2","zone.js-0.14.3","zone.js-0.14.4","zone.js-0.14.5","zone.js-0.14.6","zone.js-0.14.7","zone.js-0.14.8","zone.js-0.15.0","zone.js-0.15.1","zone.js-0.16.0","zone.js-0.16.1","zone.js-0.9.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-66035.json"}}],"references":[{"type":"WEB","url":"https://github.com/angular/angular/releases/tag/19.2.16"},{"type":"WEB","url":"https://github.com/angular/angular/releases/tag/20.3.14"},{"type":"WEB","url":"https://github.com/angular/angular/releases/tag/21.0.1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66035.json"},{"type":"ADVISORY","url":"https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66035"},{"type":"FIX","url":"https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f"},{"type":"FIX","url":"https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc"},{"type":"FIX","url":"https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e"}],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-201","CWE-359"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66035.json"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}]}