Vulnerabilities

TI-2026-32378 CVE-2026-44437 · GHSA-69xr-m8h6-h664

Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

LOW 36

The Angular SSR is a server-rise rendering tool for Angular applications.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00203 Published 2026-05-13 Fixed in 22.0.0-next.7, 21.2.9 +2 CWE-22

TI-2026-25794 CVE-2026-33397 · GHSA-vfx2-hv2g-xj5f

LOW 36

The Angular SSR is a server-rise rendering tool for Angular applications.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0026 Published 2026-03-26 Fixed in 22.0.0-next.2, 21.2.3 +1 CWE-601

TI-2026-25144 CVE-2026-32635 · GHSA-g93w-mfhg-p222

MEDIUM 40

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00473 Published 2026-03-13 Partial fix · 22.0.0-next.3, 21.2.4 +2 CWE-79