Skip to content
OpenAdvisories

Package · npm

@angular/ssr

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 6.3
    CVE-2026-104871

    Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

    The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieval logic in @angular/ssr/node, and in @angular/ssr for versions 17 through 18, a…

    angular angular-cli @angular/ssr npm
  • Medium 6.9
    CVE-2026-44437

    Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

    The Angular SSR is a server-rise rendering tool for Angular applications. From 19.0.0-next.0 to before 19.2.25, 20.3.25, 21.2.9, and 22.0.0-next.7, a vulnerability exists in the X-Forwarded-Prefix header processing logic within Angular SSR. The internal valid…

    angular angular-cli @angular/ssr npm
  • Medium 6.9
    CVE-2026-33397

    Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass

    The Angular SSR is a server-rise rendering tool for Angular applications. Versions on the 22.x branch prior to 22.0.0-next.2, the 21.x branch prior to 21.2.3, and the 20.x branch prior to 20.3.21 have an Open Redirect vulnerability in `@angular/ssr` due to an…

    angular angular-cli @angular/ssr npm
  • Critical 9.2
    CVE-2026-27739 Public exploit

    Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

    The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exist…

    angular angular-cli @nguniversal/express-engine @nguniversal/common npm
  • Medium 6.9
    CVE-2026-27738

    Angular SSR has an Open Redirect via X-Forwarded-Prefix

    The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the internal URL processing logic in versions on the 19.x branch prior to 19.2.21, the 20.x branch prior to 20.3.17, and the 21.x branch prior t…

    angular angular-cli @angular/ssr npm
  • High 8.7
    CVE-2025-62427

    Server-Side Request Forgery (SSRF) in Angular SSR

    The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request Forgery (SSRF) flaw within the URL resolution mechanism of Angular's Server-Side Rendering package (@angular/ssr) before 19.2.18, 20.3.6, and …

    angular angular-cli @angular/ssr npm
  • High 7.1
    CVE-2025-59052

    Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container (the "platform injector") to hold request-specific state during server-side rendering. For historic…

    angular angular @angular/platform-server @angular/ssr npm