Server-Side Request Forgery (SSRF)

🗓️ 06 Mar 2026 06:32:03Reported by Veracode Vulnerability DatabaseType

Angular SSR is vulnerable to SSRF via unvalidated Host and X-Forwarded headers, enabling requests.

Reporter	Title	Published	Views	Family All 31
GithubExploit	Exploit for CVE-2026-27739	8 Apr 202604:12	–	githubexploit
ATTACKERKB	CVE-2026-27739	25 Feb 202616:47	–	attackerkb
Circl	CVE-2026-27739	26 Feb 202601:40	–	circl
CNNVD	Angular 代码问题漏洞	25 Feb 202600:00	–	cnnvd
CVE	CVE-2026-27739	25 Feb 202616:47	–	cve
Cvelist	CVE-2026-27739 Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline	25 Feb 202616:47	–	cvelist
EUVD	EUVD-2026-8695	25 Feb 202622:42	–	euvd
Github Security Blog	Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline	25 Feb 202622:42	–	github
NVD	CVE-2026-27739	25 Feb 202618:23	–	nvd
OSV	CLSA-2026-1774225198 TuxCare security update for yargs-parser (3 CVEs)	4 Aug 202614:52	–	osv

Vulners

Node

common @nguniversal/commonRange0.0.0-PLACEHOLDER–16.2.0js

ssr @angular/ssrRange21.2.0-next.0–21.2.0-rc.0js

ssr @angular/ssrRange21.0.0-next.0–21.1.4js

ssr @angular/ssrRange20.0.0-next.0–20.3.16js

ssr @angular/ssrRange17.0.0-next.0–19.2.20js

Source	Link
github	www.github.com/angular/angular-cli/commit/67582a946808d2c021cbcfacbf203ef58a6fbded
github	www.github.com/angular/angular-cli/pull/32516
github	www.github.com/angular/angular-cli/commit/2a72d7483d87ccdcfa0c5148f34a4c6ebb6c6cf9
angular	www.angular.dev/best-practices/security
github	www.github.com/angular/angular-cli/commit/f78f38827861cf01471e30fcf81ef14d6265a0f2
github	www.github.com/angular/angular-cli/commit/e4d445ec674841dd1d374c83344c0a704ee3807c
github	www.github.com/advisories/GHSA-x288-3778-4hhx
developer	www.developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF
github	www.github.com/angular/angular-cli/security/advisories/GHSA-x288-3778-4hhx

23 Jun 2026 17:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 49.2

EPSS0.00498

SSVC