npm/@angular/platform-server

Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

Modified: 5/12/2026

Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage

Modified: 9/10/2025

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

Modified: 9/28/2026

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Modified: 9/10/2026

@angular/platform-server: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

Modified: 9/10/2026

@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Modified: 7/15/2026

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Modified: 9/28/2026

@angular/platform-server: SSRF via Hostname Hijacking

Modified: 7/15/2026

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Modified: 9/25/2026

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Modified: 8/3/2026

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

Modified: 7/15/2026