Vendor
high
advisory
XSS Vulnerability in Angular Server-Side Rendering via Processing Instructions
1 TTP 1 CVEAngular platform-server is vulnerable to XSS when ProcessingInstruction nodes containing untrusted input are nested within fallback raw-content elements during server-side rendering.
platform-server +3
xss
injection
web-application
server-side-rendering
angular
1t
1c
high
advisory
Cross-Site Scripting Vulnerability in Angular Server-Side Rendering
1 TTP 1 CVEA Cross-Site Scripting (XSS) vulnerability in @angular/platform-server (CVE-2026-69149) allows script injection via improper serialization of fallback raw-content elements during server-side rendering.
platform-server +3
xss
web-vulnerability
angular
1t
1c
high
advisory
Angular platform-server SSRF via Hostname Hijacking (CVE-2026-46417)
2 rules 1 TTPA server-side request forgery (SSRF) vulnerability exists in `@angular/platform-server` due to improper processing of the request URL by the server-side rendering engine, allowing attackers to redirect relative HTTP requests to attacker-controlled servers, potentially exposing internal APIs or metadata services; patch CVE-2026-46417 immediately.
@angular/platform-server +4
ssrf
angular
vulnerability
2r
1t