Angular is part of Google Open Source Software Vulnerability Reward Program. For vulnerabilities in Angular, please submit your report here.
For more information, check out Angular's security policy.
Security: angular/angular-cli
Security
SECURITY.md
-
Open Redirect and Request Steering via Encoded X-Forwarded-Prefix in Angular SSRGHSA-69xr-m8h6-h664 published
Apr 30, 2026 by alan-agius4Moderate -
Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSRGHSA-vfx2-hv2g-xj5f published
Mar 19, 2026 by alan-agius4Moderate -
Open Redirect via X-Forwarded-Prefix in Angular SSRGHSA-xh43-g2fq-wjrj published
Feb 23, 2026 by alan-agius4Moderate -
SSRF and Header Injection in Angular SSRGHSA-x288-3778-4hhx published
Feb 23, 2026 by alan-agius4Critical -
Server-Side Request Forgery (SSRF) in Angular SSRGHSA-q63q-pgmf-mxhr published
Oct 16, 2025 by alan-agius4High
Learn more about advisories related to angular/angular-cli in the GitHub Advisory Database