Angular / Angular-Cli
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-104871 | Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows | MEDIUM | 6.3 | Oct 2, 2026 |
| CVE-2026-44437 | Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix | MEDIUM | 6.9 | May 13, 2026 |
| CVE-2026-33397 | Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass | MEDIUM | 6.9 | Mar 26, 2026 |
| CVE-2026-27739 | Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline | CRITICAL | 9.2 | Feb 25, 2026 |
| CVE-2026-27738 | Angular SSR has an Open Redirect via X-Forwarded-Prefix | MEDIUM | 6.9 | Feb 25, 2026 |
| CVE-2025-62427 | Server-Side Request Forgery (SSRF) in Angular SSR | HIGH | 8.7 | Oct 16, 2025 |
Showing 1 to 6 of 6 CVEs