angular-cli

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Angular SSR is vulnerable to SSRF and Header Injection via request handling pipelineCVE-2026-27739angular · CVSS 9.2 · 0.6% likely

   CWE-918

2. Server-Side Request Forgery (SSRF) in Angular SSRCVE-2025-62427angular · CVSS 8.7 · 0.4% likely

   CWE-918

3. Angular SSR: Path Traversal to Sibling Directories in CommonEngine on WindowsCVE-2026-104871angular · CVSS 6.3 · 0.4% likely

   CWE-22

4. Angular SSR has an Open Redirect via X-Forwarded-PrefixCVE-2026-27738angular · CVSS 6.9 · 0.4% likely

   CWE-601

5. Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash BypassCVE-2026-33397angular · CVSS 6.9 · 0.3% likely

   CWE-601

6. Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-PrefixCVE-2026-44437angular · CVSS 6.9 · 0.2% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.