Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

Description

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Angular SSR request handling pipeline.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 16.2.0

References

• GHSA-x288-3778-4hhx
• angular.dev
• developer.mozilla.org
• CVE-2026-27739
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection - CVE-2026-25528
• lodash vulnerable to Code Injection via `_.template` imports key names - lodash-amd - CVE-2026-4800
• lodash vulnerable to Code Injection via `_.template` imports key names - lodash-es - CVE-2026-4800
• Axios: Header Injection via Prototype Pollution - CVE-2026-42035

You might also like:

CSRF, XXE, and 12 Other Security Acronyms Explained

Host Header Injection and Python Tests with SmartScanner 1.11

How do hackers hack websites?

Tags:

npm

@nguniversal/common