GHSA-vfx2-hv2g-xj5f
Medium · 6.1CVSS
6.1
EPSS
—
Published
Mar 19, 2026
CISA due date
—
The record
Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @angular/ssr | 20.0.0-next.0 | 20.3.21 |
| npm | @angular/ssr | 21.0.0-next.0 | 21.2.3 |
| npm | @angular/ssr | 22.0.0-next.0 | 22.0.0-next.2 |
Related vulnerabilities
- CVE-2026-33397 The Angular SSR is a server-rise rendering tool for Angular applications. Same vulnerability
- CVE-2026-44437 The Angular SSR is a server-rise rendering tool for Angular applications. Also affects @angular/ssr
- GHSA-69xr-m8h6-h664 Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix Also affects @angular/ssr
- GHSA-x288-3778-4hhx Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline Also affects @angular/ssr
- GHSA-xh43-g2fq-wjrj Angular SSR has an Open Redirect via X-Forwarded-Prefix Also affects @angular/ssr
- CVE-2026-27739 The Angular SSR is a server-rise rendering tool for Angular applications. Also affects @angular/ssr
- CVE-2026-27738 The Angular SSR is a server-rise rendering tool for Angular applications. Also affects @angular/ssr
- CVE-2026-87945 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO… CWE-601