AN
Product
angular-cli
7
CVEs
0
On KEV
9.2
Max CVSS
1
New 30D
Severity mix
Critical 2High 1Medium 4Low 0
Watch
Add angular-cli to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27739 | 9.2 | Feb 25 | Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline Affected: >= 21.2.0-next.2, < 21.2.0-rc.0; >= 21.0.0-next.0, < 21.1.5; >= 20.0.0-next.0, < 20.3.17; < 19.2.21 |
| CVE-2026-32635 | 9.0 | Mar 13 | Angular has XSS in i18n attribute bindings Affected: 17.0.0 before 19.2.0; 20.0.0 through 20.3.18; 21.0.0 before 21.2.4; 22.0.0; 22.0.0 |
Showing 2