Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Angular ausnutzen, um falsche Informationen darzustellen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.
Product
Angular ist ein TypeScript-basiertes Front-End-Webapplikationsframework. Es ist eine Weiterentwicklung des JavaScript basierten AngularJS.
Vulnerabilities 3
-
Critical 9.2CVE-2026-27739 Public exploit
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exist…
-
High 7.6
Angular i18n vulnerable to Cross-Site Scripting (XSS)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and 19.2.19 have a cross-Site scripting vulnerability in the Angular internationali…
-
Medium 6.9
Angular SSR has an Open Redirect via X-Forwarded-Prefix
The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the internal URL processing logic in versions on the 19.x branch prior to 19.2.21, the 20.x branch prior to 20.3.17, and the 21.x branch prior t…
Revision history
-
#2
Neue Updates von IBM aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-xh43-g2fq-wjrj vom 2026-02-25
https://github.com/angular/angular-cli/security/advisories/GHSA-xh43-g2fq-wjrj
-
GitHub Security Advisory GHSA-x288-3778-4hhx vom 2026-02-25
https://github.com/angular/angular-cli/security/advisories/GHSA-x288-3778-4hhx
-
GitHub Security Advisory GHSA-prjf-86w9-mfqv vom 2026-02-25
https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv
-
IBM Security Bulletin 7270805 vom 2026-04-27
https://www.ibm.com/support/pages/node/7270805