CRITICALnpm
GHSA-x288-3778-4hhx· CVE-2026-27739Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Modified: 2/25/2026
package
npm/@nguniversal/express-engine
pkg:npm/%40nguniversal/express-engine
package
pkg:npm/%40nguniversal/express-engine
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Modified: 2/25/2026