`@angular/ssr`

Ecosystem:
npm

Package URL:
pkg:npm/@angular/ssr

Total PRs:
938 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
425 repositories

Unique Repos (30 days):
20 repositories

Security Advisories

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

GHSA-69xr-m8h6-h664 CVE-2026-44437 MODERATE published 28 days ago • updated 5 days ago

### Description A vulnerability exists in the `X-Forwarded-Prefix` header processing logic within Angular SSR. The internal validation mechanism fa...

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

GHSA-x288-3778-4hhx CVE-2026-27739 CRITICAL published 3 months ago • updated 14 days ago

A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability has been identified in the...

View all 6 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump @angular/ssr from 20.3.10 to 20.3.19 in /AI-Powered-Product-Finder/Product-Finder-Alloydb/Frontend

GoogleCloudPlatform/alloydb-ai-demos #74

20.3.10 → 20.3.19 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 27 updates

spartan-ng/spartan #1251

20.3.9 → 20.3.17 Patch PR

Open 3 months ago 2 comments

Bump @angular/ssr from 20.3.16 to 20.3.19

DSpace/dspace-angular #5227

20.3.16 → 20.3.19 Patch PR

Closed 3 months ago 2 comments

Bump @angular/ssr from 19.2.19 to 19.2.22

contentful/composable-storefront-integration-example #85

19.2.19 → 19.2.22 Patch PR

Open 3 months ago 1 comment

chore(deps-dev): bump the angular group with 4 updates

db-ux-design-system/core-web #6202

20.3.17 → 20.3.18 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 10 updates

lexpank/nx #14

21.1.0 → 21.1.5 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 23 directories with 5 updates

Sin-Estres-dev/angular #19

19.2.0-next.0 → 19.2.21 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 6 updates

michaelhughes2501/firebase #4

20.3.7 → 20.3.17 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @angular/ssr from 19.2.18 to 19.2.22

forepath/agenstra #229

19.2.18 → 19.2.22 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 22 directories with 6 updates

Sin-Estres-dev/angular #13

19.2.0-next.0 → 19.2.21 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 17 directories with 3 updates

cerdaquirozr-cyber/angular #14

21.1.0-rc.0 → 21.1.5 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates

michaelhughes2501/firebase #3

20.3.7 → 20.3.17 Patch PR

Closed 3 months ago 2 comments

Bump @angular/ssr from 20.3.15 to 20.3.17 in /portfolio-angular

fserech/Portafolio #23

20.3.15 → 20.3.17 Patch PR

Open 3 months ago 1 comment

Bump @angular/ssr from 20.3.14 to 20.3.17

yannic-md/clank-bot-dashboard #104

20.3.14 → 20.3.17 Patch PR

Closed 3 months ago 1 comment

Bump @angular/ssr from 21.1.1 to 21.1.5 in /web

LoaderB0T/awdware3 #75

21.1.1 → 21.1.5 Patch PR

Open 3 months ago 2 comments

build(deps): bump @angular/ssr from 20.3.10 to 20.3.17 in /burrito-front

deway-developpement/Burrito #104

20.3.10 → 20.3.17 Patch PR

Open 3 months ago 1 comment

build(deps): bump the all-updates group across 1 directory with 5 updates

iuru2522/angular-firebase-playground #30

21.1.4 → 21.1.5 Patch PR

Closed 3 months ago 3 comments

Bump @angular/ssr from 21.1.4 to 21.1.5 in the angular group

THoguet/vac-optimizer #103

21.1.4 → 21.1.5 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the angular group with 19 updates

Apsistec/fitos-app #35

21.1.3 → 21.1.4 Patch PR

Closed 4 months ago 2 comments

build(deps): bump the all-updates group across 1 directory with 17 updates

iuru2522/angular-firebase-playground #24

21.1.3 → 21.1.4 Patch PR

Open 4 months ago 2 comments

Bump the angular group with 10 updates

Velid-387/huzur-mostar #104

21.1.2 → 21.1.3 Patch PR

Open 4 months ago 4 comments

Bump the angular group across 1 directory with 2 updates

zeffyr-000/zeffyrmusic #169

21.1.2 → 21.1.3 Patch PR

Closed 4 months ago 2 comments

Bump the angular group across 1 directory with 22 updates

zeffyr-000/zeffyrmusic #164

21.1.0 → 21.1.2 Patch PR

Closed 4 months ago 1 comment

Bump the non-major group with 37 updates

filipsobol/sonda #228

21.1.0 → 21.1.2 Patch PR

Open 4 months ago 1 comment

Bump @angular/ssr from 18.2.20 to 18.2.21 in /medcheckapp

DayanFA/MedCheck #8

18.2.20 → 18.2.21 Patch PR

Closed 5 months ago 1 comment

Bump @angular/ssr from 19.2.3 to 19.2.19

Velid-387/huzur-mostar #77

19.2.3 → 19.2.19 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the angular-deps group with 6 updates

hard-rox/kathanika #2246

21.0.3 → 21.0.4 Patch PR

Open 6 months ago 1 comment

deps(deps): bump the production-minor-patch group with 10 updates

Recipe-Web-App/admin-ui-service #84

21.0.2 → 21.0.3 Patch PR

Closed 6 months ago 2 comments

build(deps): bump @angular/ssr from 20.3.10 to 20.3.13

DaveMBush/SmartNgRX #1168

20.3.10 → 20.3.13 Patch PR

Open 6 months ago 2 comments

deps(deps): bump @angular/ssr from 20.3.3 to 20.3.13

AppOutlet/appoutlet.github.io #72

20.3.3 → 20.3.13 Patch PR

Closed 6 months ago 1 comment

deps(deps): bump the production-minor-patch group with 13 updates

Recipe-Web-App/admin-ui-service #70

20.3.9 → 20.3.11 Patch PR

Closed 6 months ago 1 comment

Bump @angular/ssr from 19.2.14 to 19.2.19 in the npm_and_yarn group across 1 directory

clemensv/xregistry-viewer #18

19.2.14 → 19.2.19 Patch PR

Closed 7 months ago 1 comment

Chore(deps): Bump @angular/ssr from 20.3.1 to 20.3.9 in /examples/angular

Adyen/adyen-web #3627

20.3.1 → 20.3.9 Patch PR

Open 7 months ago 3 comments

build(deps): bump the npm-packages group with 16 updates

Rs-appez/dofuspoly_frontend #61

20.3.7 → 20.3.8 Patch PR

Open 7 months ago 2 comments

deps(deps): bump the production-minor-patch group with 8 updates

Recipe-Web-App/admin-ui-service #62

20.3.7 → 20.3.8 Patch PR

Closed 7 months ago 2 comments

Bump @angular/ssr from 20.3.3 to 20.3.8

letheanVPN/lthn.io #1

20.3.3 → 20.3.8 Patch PR

Open 7 months ago 2 comments

deps(deps): bump the minor-and-patch-deps group across 1 directory with 15 updates

AppOutlet/appoutlet.github.io #68

20.3.3 → 20.3.7 Patch PR

Closed 7 months ago 1 comment

deps(deps): bump @angular/ssr from 20.3.1 to 20.3.7 in /spicy-fairytales

Phazzie/SpicyFairytales #90

20.3.1 → 20.3.7 Patch PR

Open 7 months ago 4 comments

deps(deps): bump the angular group in /website with 11 updates

AppOutlet/GetDisCorkie #73

20.3.6 → 20.3.7 Patch PR

Closed 7 months ago 2 comments

deps(deps): bump @angular/ssr from 20.3.1 to 20.3.6 in /spicy-fairytales

Phazzie/SpicyFairytales #81

20.3.1 → 20.3.6 Patch PR

Open 8 months ago 4 comments

chore(deps): bump @angular/ssr from 19.2.17 to 19.2.18

TriBuiQuang/demo_angular_19 #20

19.2.17 → 19.2.18 Patch PR

Open 8 months ago 1 comment

build(deps): bump @angular/ssr from 20.3.5 to 20.3.6 in the npm_and_yarn group across 1 directory

NuschtOS/search #276

20.3.5 → 20.3.6 Patch PR

Closed 8 months ago 1 comment

Bump @angular/ssr from 19.2.10 to 19.2.18

karimprime/Task1-Engaz #4

19.2.10 → 19.2.18 Patch PR

Open 8 months ago 1 comment

Bump @angular/ssr from 19.2.16 to 19.2.18 in /src/Overseer.Client in the npm_and_yarn group across 1 directory

michaelfdeberry/overseer #125

19.2.16 → 19.2.18 Patch PR

Closed 8 months ago 1 comment

Bump @angular/ssr from 19.2.17 to 19.2.18

mystackbox/prj-portfolio #113

19.2.17 → 19.2.18 Patch PR

Open 8 months ago

chore(deps): bump @angular/ssr from 19.2.12 to 19.2.18

byteark/byteark-player-angular #3

19.2.12 → 19.2.18 Patch PR

Open 8 months ago

Bump @angular/ssr from 19.2.15 to 19.2.18 in /angular/datacite-documentation

usnistgov/oar-metrics-enhancements #10

19.2.15 → 19.2.18 Patch PR

Open 8 months ago

build(deps): bump @angular/ssr from 19.2.15 to 19.2.18

jerzual/azimut #87

19.2.15 → 19.2.18 Patch PR

Open 8 months ago

Build(deps): Bump @angular/ssr from 19.2.17 to 19.2.18 in /angular

redbox-mint/redbox-portal #3454

19.2.17 → 19.2.18 Patch PR

Merged 8 months ago 1 comment

Bump @angular/ssr from 19.2.15 to 19.2.18

impulse30/exo_angular #5

19.2.15 → 19.2.18 Patch PR

Open 8 months ago

Package Details

Name:	`@angular/ssr`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@angular/ssr`
JSON API:	View JSON

Security Advisories

6

Active advisories

CRITICAL 1

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Angular server side rendering utilities

Repository:	https://github.com/angular/angular-cli
Homepage:	https://github.com/angular/angular-cli
Latest Release:	`20.0.1` 12 months ago
Dependent Repos:	0
Dependent Packages:	51
Downloads:	1,000,616
Ranking:	Top 37.4966% by dependent repos Top 53.9685% by dependent pkgs

PR Status

Open 499 (53.2%)

Merged 90 (9.6%)

Closed 312 (33.3%)

PR Types

Major 143 (15.2%)

Minor 341 (36.4%)

Patch 416 (44.3%)

@angular/ssr

Security Advisories

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

Angular SSR has an Open Redirect via X-Forwarded-Prefix

Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR

Angular SSR has a Server-Side Request Forgery (SSRF) flaw

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

6

Package Information

PR Status

PR Types

`@angular/ssr`