Package impact
npm / @angular/platform-server
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-46417 | high | — | 8.0 | 10d ago | @angular/platform-server: SSRF via Hostname Hijacking | |||
| CVE-2026-41423 | medium | 5.3 | 5.3 | 21d ago | Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server | |||
| CVE-2025-59052 | unknown | — | — | 9mo ago | Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage |