Skip to content
Threat Feed
Subscribe

Vendor

Angular

2 briefs RSS
high advisory

Cross-Site Scripting Vulnerability in Angular Server-Side Rendering

A Cross-Site Scripting (XSS) vulnerability in @angular/platform-server (CVE-2026-69149) allows script injection via improper serialization of fallback raw-content elements during server-side rendering.

platform-server +3 xss web-vulnerability angular
1t 1c
high advisory

Angular platform-server SSRF via Hostname Hijacking (CVE-2026-46417)

A server-side request forgery (SSRF) vulnerability exists in `@angular/platform-server` due to improper processing of the request URL by the server-side rendering engine, allowing attackers to redirect relative HTTP requests to attacker-controlled servers, potentially exposing internal APIs or metadata services; patch CVE-2026-46417 immediately.

@angular/platform-server +4 ssrf angular vulnerability
2r 1t