Angular-cli (Angular) - vulnerabilities (CVEs)

6 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-02. Vendor: Angular.

CVEs of Angular-cli

• CVE-2026-104871 - CVSS 6.3 (medium), 2026-10-02: The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage…
• CVE-2026-44437 - CVSS 6.9 (medium), 2026-05-13: The Angular SSR is a server-rise rendering tool for Angular applications. From 19.0.0-next.0 to before 19.2.25, 20.3.25, 21.2.9, and 22.0.0-next.7, a…
• CVE-2026-33397 - CVSS 6.9 (medium), 2026-03-26: The Angular SSR is a server-rise rendering tool for Angular applications. Versions on the 22.x branch prior to 22.0.0-next.2, the 21.x branch prior to 21.2.3,…
• CVE-2026-27739 - CVSS 9.2 (critical), 2026-02-25: The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side…
• CVE-2026-27738 - CVSS 6.9 (medium), 2026-02-25: The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the internal URL processing logic in…
• CVE-2025-62427 - CVSS 8.7 (high), 2025-10-16: The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request Forgery (SSRF) flaw within the URL…