Angular Cli vulnerabilities

3 known vulnerabilities in Angular Cli from Angular. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  compiler: Improper Neutralization of Input During Web Page Generation

  CVE-2026-32635Mar 16, 2026Angular

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angu

• 9.2 Critical severity

  angular-cli: Server-Side Request Forgery

  CVE-2026-27739Feb 25, 2026Angular

  The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exists

• 8.7 High severity

  angular-cli: Server-Side Request Forgery

  CVE-2025-62427Oct 16, 2025Angular

  The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request Forgery (SSRF) flaw within the URL resolution mechanism of Angular's Server-Side Rendering package (@angular/ssr) before 19.2.18, 20.3.6, and 2