@angular/platform-server vulnerabilities

CVEs whose affected-version data names the @angular/platform-server package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

5 CVEsRSS

CVE-2026-111754Medium

1w ago

@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

▾ Sunlitangular · @angular/platform-servervia GHSA

CVE-2026-101895High· 8.7PoC

2w ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an inf…

▾ Midnightangular · @angular/platform-serverEPSS 0.87%via NVD

CVE-2026-69149High

2mo ago

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

▾ Twilightangular · @angular/platform-serverEPSS 0.42%via GHSA

CVE-2026-50168High

4mo ago

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

▾ Twilightangular · @angular/platform-serverEPSS 0.24%via GHSA

CVE-2026-50555High

4mo ago

@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

▾ Twilightangular · @angular/platform-serverEPSS 0.27%via GHSA