What’s Vulnerable › Products

angular-cli vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your angular-cli version is affected

Latest angular-cli vulnerabilities

• CVE-2026-104871 — Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows (CVSS 6.3)
• CVE-2026-44437 — Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix (CVSS 6.1)
• CVE-2026-33397 — Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass (CVSS 6.1)
• CVE-2026-32635 — Angular has XSS in i18n attribute bindings (CVSS 9.0)
• CVE-2026-27739 — Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline (CVSS 9.2)
• CVE-2026-27738 — Angular SSR has an Open Redirect via X-Forwarded-Prefix (CVSS 6.9)
• CVE-2025-62427 — Server-Side Request Forgery (SSRF) in Angular SSR (CVSS 8.7)