Angular SSR has an Open Redirect via X-Forwarded-Prefix

🗓️ 25 Feb 2026 22:41:57Reported by GitHub Advisory DatabaseType

Angular SSR open redirect via X-Forwarded-Prefix can yield protocol-relative redirects to attacker domains.

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2026-33397	26 Mar 202613:46	–	attackerkb
ATTACKERKB	CVE-2026-27738	25 Feb 202616:40	–	attackerkb
Circl	CVE-2026-27738	26 Feb 202602:10	–	circl
CNNVD	Angular 输入验证错误漏洞	25 Feb 202600:00	–	cnnvd
CVE	CVE-2026-27738	25 Feb 202616:40	–	cve
Cvelist	CVE-2026-27738 Angular SSR has an Open Redirect via X-Forwarded-Prefix	25 Feb 202616:40	–	cvelist
EUVD	EUVD-2026-13897	26 Mar 202613:46	–	euvd
EUVD	EUVD-2026-8687	25 Feb 202622:41	–	euvd
NVD	CVE-2026-27738	25 Feb 202617:25	–	nvd
OSV	CVE-2026-27738 Angular SSR has an Open Redirect via X-Forwarded-Prefix	25 Feb 202616:40	–	osv

Vulners

Node

angular ssrRange19.0.0-next.0–19.2.21npm

angular ssrRange20.0.0-next.0–20.3.17npm

angular ssrRange21.0.0-next.0–21.1.5npm

angular ssrRange21.2.0-next.0–21.2.0-rc.0npm

Source	Link
github	www.github.com/angular/angular-cli/security/advisories/GHSA-xh43-g2fq-wjrj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-27738
github	www.github.com/angular/angular-cli/issues/32501
github	www.github.com/angular/angular-cli/pull/32521
github	www.github.com/angular/angular-cli/commit/f086eccc36d10cf01c426e35864bc32e1e292323
github	www.github.com/advisories/GHSA-xh43-g2fq-wjrj

25 Feb 2026 22:41Current

5.6Medium risk

Vulners AI Score5.6

CVSS 46.9

EPSS0.00302

SSVC