CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 0 Last 7 days 2,628 Total CVEs 401,238 CISA KEV 1,733 Critical 42,400 All stats

Filters: Vendor: Angular Product: Angular-Cli Clear all

Page 1

CVE-2026-104871 MEDIUM

Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

CVSS 6.3 EPSS n/a Oct 2, 2026

CVE-2026-44437 MEDIUM

Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

CVSS 6.9 EPSS 0.30% May 13, 2026

CVE-2026-33397 MEDIUM

Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass

CVSS 6.9 EPSS 0.33% Mar 26, 2026

CVE-2026-27739 CRITICAL

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

CVSS 9.2 EPSS 0.52% Feb 25, 2026

CVE-2026-27738 MEDIUM

Angular SSR has an Open Redirect via X-Forwarded-Prefix

CVSS 6.9 EPSS 0.52% Feb 25, 2026

CVE-2025-62427 HIGH

Server-Side Request Forgery (SSRF) in Angular SSR

CVSS 8.7 EPSS 0.43% Oct 16, 2025

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2026-104871	Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows	MEDIUM	6.3	n/a		Oct 2, 2026
CVE-2026-44437	Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix	MEDIUM	6.9	0.30%	npm	May 13, 2026
CVE-2026-33397	Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass	MEDIUM	6.9	0.33%	npm	Mar 26, 2026
CVE-2026-27739	Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline	CRITICAL	9.2	0.52%	npm	Feb 25, 2026
CVE-2026-27738	Angular SSR has an Open Redirect via X-Forwarded-Prefix	MEDIUM	6.9	0.52%	npm	Feb 25, 2026
CVE-2025-62427	Server-Side Request Forgery (SSRF) in Angular SSR	HIGH	8.7	0.43%	npm	Oct 16, 2025

Rows per page

Showing 1 to 6 CVEs · page 1