Sensitive Information Disclosure

angular-server-side-configuration is vulnerable to Sensitive Information Disclosure. The vulnerability is due to leaking of environment variables because the library detects used environment variables in TypeScript files and writes them to a ngssc.json file in the output directory, which is then inserted into the app’s index.html, resulting in the Disclosure of Sensitive Information. angular-server-side-configuration is only vulnerable in a monorepo configuration with an angular backend.