angular angular-cli vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20265

Newest CVEs

• CVE-2026-104871

  Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

  angular · angular-cli

  Medium6.3
• CVE-2026-44437

  Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

  angular · angular-cli

  Medium6.9
• CVE-2026-33397

  Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass

  angular · angular-cli

  Medium6.9
• CVE-2026-27739

  Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

  angular · angular-cli

  Critical9.2
• CVE-2026-27738

  Angular SSR has an Open Redirect via X-Forwarded-Prefix

  angular · angular-cli

  Medium6.9
• CVE-2025-62427

  Server-Side Request Forgery (SSRF) in Angular SSR

  angular · angular-cli

  High8.7