Angular Cli
Angular · 3 CVEs
CVE-2026-44437
MEDIUM
Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix
May 13, 2026
CVE-2026-33397
MEDIUM
Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass
Mar 26, 2026
CVE-2026-32635
HIGH
Angular has XSS in i18n attribute bindings
Mar 13, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-44437 | Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix | MEDIUM | 0.30% | May 13, 2026 |
| CVE-2026-33397 | Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass | MEDIUM | 0.33% | Mar 26, 2026 |
| CVE-2026-32635 | Angular has XSS in i18n attribute bindings | HIGH | 0.48% | Mar 13, 2026 |
Showing 1 to 3 of 3 CVEs