HIGHnpm
GHSA-68x2-mx4q-78m7· CVE-2025-59052Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Modified: 9/10/2025
package
pkg:npm/%40angular/ssr
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Modified: 9/10/2025
Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix
Modified: 5/14/2026
Angular SSR has a Server-Side Request Forgery (SSRF) flaw
Modified: 10/16/2025
Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR
Modified: 5/6/2026
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Modified: 2/25/2026
Angular SSR has an Open Redirect via X-Forwarded-Prefix
Modified: 4/2/2026