CVE-2026-111754

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, ServerPlatformLocation in Angular server-side rendering checks for protocol-relative URLs before WHATWG URL normalization. A...

GHSA-W739-GVWX-GRC3 @angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...

@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

An open redirect vulnerability was identified in @angular/platform-server when Server-Side Rendering SSR is enabled. When Angular SSR renders an incoming request, URL resolution and platform navigation are managed by ServerPlatformLocation using resolveUrl or parseUrl in v20. While resolveUrl...

Open Redirect

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Open Redirect via the resolveUrl function in packages/platform-server/src/url.ts, where WHATWG URL dot-segment normalization is applied after the raw-string...

PT-2026-118577

Name of the Vulnerable Software and Affected Versions Angular versions prior to 20.3.33 Angular versions prior to 21.2.25 Angular versions prior to 22.2.1 Description An open redirect issue exists in @angular/platform-server when Server-Side Rendering SSR is enabled. The ServerPlatformLocation...

CVE-2026-88056: Server-Side Request Forgery (SSRF)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

Remote Code Execution

Overview org.glassfish:jakarta.faces is an Oracle's implementation of the JavaServer Faces specification. Affected versions of this package are vulnerable to Remote Code Execution due to path traversal in the resolveURLURL source, String path method of DefaultFaceletFactory, which passes a path...

U.S. Dept Of Defense: Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on ███████

A Cross-Site Scripting XSS vulnerability was identified in an ASP.NET web application. The issue arose from improper handling of URLs passed to the ResolveUrl method, which failed to sanitize user-controlled input. This allowed injection of arbitrary JavaScript payloads that executed in the conte...