Skip to content
Threat Feed
Subscribe

Tag

Angular

4 briefs RSS
high advisory

Cross-Site Scripting in Angular Platform Server SSR

An XSS vulnerability in Angular's server-side rendering serializer fails to escape closing tags within <template> content nested inside fallback raw-content elements, allowing arbitrary script execution.

Angular platform-server +6 ssrf angular vulnerability
3t 1c
high advisory

Cross-Site Scripting Vulnerability in Angular Server-Side Rendering

A Cross-Site Scripting (XSS) vulnerability in @angular/platform-server (CVE-2026-69149) allows script injection via improper serialization of fallback raw-content elements during server-side rendering.

platform-server +3 xss web-vulnerability angular
1t 1c
high advisory

Angular platform-server SSRF via Hostname Hijacking (CVE-2026-46417)

A server-side request forgery (SSRF) vulnerability exists in `@angular/platform-server` due to improper processing of the request URL by the server-side rendering engine, allowing attackers to redirect relative HTTP requests to attacker-controlled servers, potentially exposing internal APIs or metadata services; patch CVE-2026-46417 immediately.

@angular/platform-server +4 ssrf angular vulnerability
2r 1t
high advisory

Angular Cross-Site Scripting (XSS) Vulnerability

A cross-site scripting (XSS) vulnerability exists in Angular versions prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, allowing attackers to execute arbitrary code within the context of the vulnerable application, potentially leading to session hijacking, data exfiltration, and unauthorized actions.

angular xss vulnerability
2r 5t