Product by Angular

    Angular-cli

    7 known vulnerabilities in Angular-cli (Angular), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Angular-cli (Angular)
    CriticalCVE-2026-27739

    Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

    		—
    CriticalCVE-2026-32635

    Angular has XSS in i18n attribute bindings

    		9.0
    MediumCVE-2026-104871

    Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

    also in 1 other product

    		—
    HighCVE-2025-62427

    Server-Side Request Forgery (SSRF) in Angular SSR

    		—
    MediumCVE-2026-27738

    Angular SSR has an Open Redirect via X-Forwarded-Prefix

    		—
    MediumCVE-2026-44437

    Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

    		6.1
    MediumCVE-2026-33397

    Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass

    		6.1

    All products by Angular