@angular angular-cli

• CVE-2026-104871 Medium 6.3 Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows 0.4%
• CVE-2026-44437 Medium 6.9 Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix 0.2%
• CVE-2026-33397 Medium 6.9 Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass 0.3%
• CVE-2026-27739 Critical 9.2 Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline 0.6%
• CVE-2026-27738 Medium 6.9 Angular SSR has an Open Redirect via X-Forwarded-Prefix 0.4%
• CVE-2025-62427 High 8.7 Server-Side Request Forgery (SSRF) in Angular SSR 0.4%