918 matches found
CVE-2026-111754
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, ServerPlatformLocation in Angular server-side rendering checks for protocol-relative URLs before WHATWG URL normalization. A...
CVE-2026-111754
The @angular/platform-server and @angular/ssr packages are vulnerable to an Open Redirect vulnerability in Server-Side Rendering (SSR) environments. The root cause is that ServerPlatformLocation performs protocol-relative URL checks before WHATWG URL normalization. Attackers can provide a request...
CVE-2026-111754 Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, ServerPlatformLocation in Angular server-side rendering checks for protocol-relative URLs before WHATWG URL normalization. A...
3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +19 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=19.2.18, <=19.2.25)
@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 - mat-typeahead-library-custom123 0.0.0 and more Source cves: CVE-2026-111754 Source advisory: GHSA-W739-GVWX-GRC3...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: GHSA-W739-GVWX-GRC3...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: OSV:GHSA-W739-GVWX-GRC3...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: GHSA-W739-GVWX-GRC3...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: OSV:GHSA-W739-GVWX-GRC3...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-21347776...
3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +19 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=19.2.18, <=19.2.25)
@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 - mat-typeahead-library-custom123 0.0.0 and more Source cves: CVE-2026-111754 Source advisory: OSV:GHSA-W739-GVWX-GRC3...
Open Redirect
Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Open Redirect via the resolveUrl function in packages/platform-server/src/url.ts, where WHATWG URL dot-segment normalization is applied after the raw-string...
@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...
GHSA-W739-GVWX-GRC3 @angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-21347776...
PT-2026-118577
An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...
CVE-2026-111754
An open redirect vulnerability was identified in "@angular/platform-server" when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by "ServerPlatformLocation" using "resolveUrl" or "parseUrl" in v20. While...
@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=20.0.0, <=20.3.19)
@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-111754 Source advisory: MEND:CVE-2026-111754...
create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-111754 via @angular/platform-server (>=21.1.2, <=21.2.9)
@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-111754 Source advisory: MEND:CVE-2026-111754...