591 matches found
GHSA-W739-GVWX-GRC3 @angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...
@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...
3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +19 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=19.2.18, <=19.2.25)
@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 - mat-typeahead-library-custom123 0.0.0 and more Source cves: CVE-2026-111754 Source advisory: GHSA-W739-GVWX-GRC3...
3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +19 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=19.2.18, <=19.2.25)
@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 - mat-typeahead-library-custom123 0.0.0 and more Source cves: CVE-2026-111754 Source advisory: OSV:GHSA-W739-GVWX-GRC3...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-21347776...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: GHSA-W739-GVWX-GRC3...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: OSV:GHSA-W739-GVWX-GRC3...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-21347776...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: GHSA-W739-GVWX-GRC3...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: OSV:GHSA-W739-GVWX-GRC3...
Open Redirect
Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Open Redirect via the resolveUrl function in packages/platform-server/src/url.ts, where WHATWG URL dot-segment normalization is applied after the raw-string...
PT-2026-118577
An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: MEND:CVE-2026-111754...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: MEND:CVE-2026-111754...
CVE-2026-111754
An open redirect vulnerability was identified in "@angular/platform-server" when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by "ServerPlatformLocation" using "resolveUrl" or "parseUrl" in v20. While...
CLSA-2026-1792380677 TuxCare security update for @angular/platform-server (3 CVEs)
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 16.2.7-tuxcare.3...
CLSA-2026-1792380674 TuxCare security update for @angular/platform-server (1 CVE)
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 17.1.0-tuxcare.3...
CLSA-2026-1792380676 TuxCare security update for @angular/platform-server (2 CVEs)
TuxCare rebuilt @angular/platform-server to address 2 CVEs. Fixed in 5.1.0-tuxcare.4...