`@angular/platform-server`

Ecosystem:
npm

Package URL:
pkg:npm/@angular/platform-server

Total PRs:
924 Dependabot PRs

Latest PR:
about 18 hours ago

Unique Repositories:
418 repositories

Unique Repos (30 days):
25 repositories

Security Advisories

Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

GHSA-45q2-gjvg-7973 CVE-2026-41423 HIGH published 2 months ago • updated 9 days ago

### Impact A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability exists in `@an...

@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

GHSA-hqr9-c56f-3x7f CVE-2026-50555 HIGH published 3 days ago • updated 1 day ago

A Cross-Site Scripting (XSS) vulnerability exists in `@angular/platform-server`'s DOM emulation dependency (`domino`) when serializing the content ...

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

GHSA-xrxm-cp7j-8xf6 CVE-2026-50168 HIGH published 3 days ago • updated about 1 hour ago

An issue in the `@angular/platform-server` package allows remote attackers to bypass host allowlist constraints and direct server-side outgoing req...

@angular/platform-server: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

GHSA-gxx4-3xcv-f8qx CVE-2026-50556 HIGH published 3 days ago • updated 2 days ago

A Cross-Site Scripting (XSS) vulnerability exists in `@angular/platform-server`'s DOM emulation dependency (`domino`) when serializing the content ...

@angular/platform-server: SSRF via Hostname Hijacking

GHSA-rfh7-fxqc-q52v CVE-2026-46417 HIGH published about 1 month ago • updated about 4 hours ago

### Impact A Server-Side Request Forgery (SSRF) vulnerability exists in `@angular/platform-server`. The issue stems from how the server-side rende...

View all 6 advisories

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

Bump @angular/platform-server from 19.2.8 to 19.2.9

kevinslawinski/about #11

19.2.8 → 19.2.9 Patch PR

Closed about 1 year ago 1 comment

Bump @angular/platform-server from 18.2.13 to 19.2.9 in /cv-app

deduefren/deduefren-cv #1108

18.2.13 → 19.2.9 Major PR

Closed about 1 year ago 1 comment

⬆️ Bump @angular/platform-server from 19.2.7 to 19.2.8 in /geo-search

oc-2/website-breaker2 #256

19.2.7 → 19.2.8 Patch PR

Closed about 1 year ago 1 comment

⬆️ Bump @angular/platform-server from 19.2.6 to 19.2.7 in /geo-search

oc-2/website-breaker2 #241

19.2.6 → 19.2.7 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the dev-dependencies group across 1 directory with 77 updates

koobiq/angular-components #366

18.2.6 → 18.2.8 Patch PR

Closed over 1 year ago 1 comment

Bump @angular/platform-server from 17.3.9 to 18.2.5 in /src/Web/WebSPA/Client

NatYou345/mslearn-microservices-devops-aspnet-core #552

17.3.9 → 18.2.5 Major PR

Closed over 1 year ago 1 comment

Bump @angular/platform-server from 15.1.4 to 15.2.8

michaelsouellette/michaelsouellette.github.io #529

15.1.4 → 15.2.8 Minor PR

Closed about 3 years ago 1 comment

Package Details

Name:	`@angular/platform-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@angular/platform-server`
JSON API:	View JSON

Security Advisories

6

Active advisories

HIGH 6

View All npm Advisories

Package Information

Description:

Angular - library for using Angular in Node.js

Repository:	https://github.com/angular/angular
Homepage:	https://github.com/angular/angular#readme
Latest Release:	`20.0.1` about 1 year ago
Dependent Repos:	32,535
Dependent Packages:	3,488
Downloads:	2,005,491
Ranking:	Top 0.1716% by dependent repos Top 0.2345% by downloads Top 0.0244% by dependent pkgs

PR Status

Open 478 (51.7%)

Merged 87 (9.4%)

Closed 307 (33.2%)

PR Types

Major 185 (20.0%)

Minor 334 (36.1%)

Patch 352 (38.1%)

Removal 1 (0.1%)