@aiao/nest-angular-universal (>=0.1.1-alpha.1 <=0.2.6), @arsloptima/password-strength (=0.0.1) +54 more potentially affected by CVE-2026-27739 via @nguniversal/common (>=0.0.0-PLACEHOLDER <=16.2.0)

@nguniversal/common NPM version =0.0.0-PLACEHOLDER, =0.1.1-alpha.1, =1.0.1, =0.7.0, =0.3.0, =0.0.6, =11.0.1, =11.0.1, =5.0.0, =7.0.0, =6.1.1, =4.0.0, =8.0.0 and more Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...

Race Condition

Overview @nguniversal/common is an Angular Universal module that is common across server-side rendering app irrespective of the rendering engine Affected versions of this package are vulnerable to Race Condition between multiple concurrent requests in the global platform injector, when using the...