Overview · angular/angular-cli · GitHub

Sitelet https://github.com/angular/angular-cli/security

Security

Report a vulnerability

SECURITY.md

Angular is part of Google Open Source Software Vulnerability Reward Program. For vulnerabilities in Angular, please submit your report here.

For more information, check out Angular's security policy.

Open Redirect and Request Steering via Encoded X-Forwarded-Prefix in Angular SSR
GHSA-69xr-m8h6-h664 published Apr 30, 2026 by alan-agius4

Moderate
Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR
GHSA-vfx2-hv2g-xj5f published Mar 19, 2026 by alan-agius4

Moderate
Open Redirect via X-Forwarded-Prefix in Angular SSR
GHSA-xh43-g2fq-wjrj published Feb 23, 2026 by alan-agius4

Moderate
SSRF and Header Injection in Angular SSR
GHSA-x288-3778-4hhx published Feb 23, 2026 by alan-agius4

Critical
Server-Side Request Forgery (SSRF) in Angular SSR
GHSA-q63q-pgmf-mxhr published Oct 16, 2025 by alan-agius4

High

Learn more about advisories related to angular/angular-cli in the GitHub Advisory Database