`@angular/ssr`

Ecosystem:
npm

Package URL:
pkg:npm/@angular/ssr

Total PRs:
939 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
425 repositories

Unique Repos (30 days):
19 repositories

Security Advisories

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

GHSA-69xr-m8h6-h664 CVE-2026-44437 MODERATE published 28 days ago • updated 5 days ago

### Description A vulnerability exists in the `X-Forwarded-Prefix` header processing logic within Angular SSR. The internal validation mechanism fa...

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

GHSA-x288-3778-4hhx CVE-2026-27739 CRITICAL published 3 months ago • updated 14 days ago

A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability has been identified in the...

View all 6 advisories

Recent PRs

RSS Feed

Bump the angular group across 1 directory with 22 updates

zeffyr-000/zeffyrmusic #164

21.1.0 → 21.1.2 Patch PR

Closed 4 months ago 1 comment

Bump the non-major group with 37 updates

filipsobol/sonda #228

21.1.0 → 21.1.2 Patch PR

Open 4 months ago 1 comment

build(deps): bump the all-updates group across 1 directory with 23 updates

iuru2522/angular-firebase-playground #15

19.2.15 → 21.1.2 Major PR

Open 4 months ago 1 comment

build(deps): bump the all-updates group with 22 updates

iuru2522/angular-firebase-playground #14

19.2.15 → 21.1.2 Major PR

Open 4 months ago 1 comment

Bump @angular/ssr from 17.3.17 to 21.1.2 in /frontend

Dargon789/mempool #140

17.3.17 → 21.1.2 Major PR

Open 4 months ago 2 comments

frontend(deps): bump the security-updates group across 1 directory with 30 updates

APorkolab/SudoQMaestro #54

20.2.0 → 21.1.1 Major PR

Open 4 months ago 1 comment

Bump @angular/ssr from 17.3.17 to 21.1.1 in /frontend

Dargon789/mempool #132

17.3.17 → 21.1.1 Major PR

Closed 4 months ago 3 comments

Bump the non-major group across 1 directory with 50 updates

filipsobol/sonda #221

21.0.2 → 21.1.0 Minor PR

Open 5 months ago 1 comment

chore(deps): bump the angular group with 22 updates

ng-forge/ng-forge #148

21.0.5 → 21.1.0 Minor PR

Open 5 months ago 4 comments

Bump @angular/ssr from 18.2.20 to 18.2.21 in /medcheckapp

DayanFA/MedCheck #8

18.2.20 → 18.2.21 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the dependencies group with 21 updates

redpusha/andrea-s-store #3

19.2.11 → 21.0.5 Major PR

Closed 5 months ago 2 comments

Bump @angular/ssr from 17.3.17 to 21.0.5 in /frontend

Dargon789/mempool #121

17.3.17 → 21.0.5 Major PR

Open 5 months ago 3 comments

frontend(deps): bump @angular/ssr from 20.2.0 to 20.3.13 in /frontend

APorkolab/SudoQMaestro #45

20.2.0 → 20.3.13 Minor PR

Closed 5 months ago 2 comments

Bump @angular/ssr from 19.1.7 to 21.0.4

preprio/angular-quick-start #20

19.1.7 → 21.0.4 Major PR

Open 5 months ago 3 comments

Bump the angular group with 10 updates

Velid-387/huzur-mostar #85

19.2.19 → 21.0.4 Major PR

Open 5 months ago 6 comments

Bump @angular/ssr from 19.2.3 to 19.2.19

Velid-387/huzur-mostar #77

19.2.3 → 19.2.19 Patch PR

Open 5 months ago 2 comments

Bump @angular/ssr from 17.3.0 to 18.2.21

vvaldesc/Angular_Material_SPA #5

17.3.0 → 18.2.21 Major PR

Closed 5 months ago 1 comment

chore(deps): bump the angular-deps group with 6 updates

hard-rox/kathanika #2246

21.0.3 → 21.0.4 Patch PR

Open 6 months ago 1 comment

deps(deps): bump the production-minor-patch group with 10 updates

Recipe-Web-App/admin-ui-service #84

21.0.2 → 21.0.3 Patch PR

Closed 6 months ago 2 comments

build(deps): bump @angular/ssr from 20.3.10 to 20.3.13

DaveMBush/SmartNgRX #1168

20.3.10 → 20.3.13 Patch PR

Open 6 months ago 2 comments

deps(deps): bump @angular/ssr from 20.3.3 to 20.3.13

AppOutlet/appoutlet.github.io #72

20.3.3 → 20.3.13 Patch PR

Closed 6 months ago 1 comment

frontend(deps): bump the security-updates group across 1 directory with 28 updates

APorkolab/SudoQMaestro #40

20.2.0 → 21.0.2 Major PR

Closed 6 months ago 2 comments

frontend(deps): bump the security-updates group across 1 directory with 26 updates

APorkolab/SudoQMaestro #36

20.2.0 → 21.0.1 Major PR

Closed 6 months ago 2 comments

Bump @angular/ssr from 18.0.6 to 18.2.21

gobika21/portfolio #1

18.0.6 → 18.2.21 Minor PR

Closed 6 months ago 1 comment

deps(deps): bump the production-minor-patch group with 13 updates

Recipe-Web-App/admin-ui-service #70

20.3.9 → 20.3.11 Patch PR

Closed 6 months ago 1 comment

frontend(deps): bump the security-updates group across 1 directory with 25 updates

APorkolab/SudoQMaestro #31

20.2.0 → 21.0.0 Major PR

Open 6 months ago 1 comment

Bump @angular/ssr from 18.2.20 to 21.0.0

DSpace/dspace-angular #4851

18.2.20 → 21.0.0 Major PR

Closed 6 months ago 2 comments

build(deps): bump the infra group with 17 updates

rdamazio/efis-editor #329

20.3.10 → 21.0.0 Major PR

Open 6 months ago 2 comments

frontend(deps): bump @angular/ssr from 20.2.0 to 20.3.11 in /frontend

APorkolab/SudoQMaestro #29

20.2.0 → 20.3.11 Minor PR

Closed 7 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 5 updates

pullakarthiksrivastav/juice-shop #9

17.3.17 → 20.3.10 Major PR

Open 7 months ago 3 comments

frontend(deps): bump @angular/ssr from 20.2.0 to 20.3.10 in /frontend

APorkolab/SudoQMaestro #26

20.2.0 → 20.3.10 Minor PR

Open 7 months ago 1 comment

Bump @angular/ssr from 17.3.17 to 18.2.21

Kaiso123/to-do-app #1

17.3.17 → 18.2.21 Major PR

Closed 7 months ago 1 comment

Bump @angular/ssr from 19.2.14 to 19.2.19 in the npm_and_yarn group across 1 directory

clemensv/xregistry-viewer #18

19.2.14 → 19.2.19 Patch PR

Closed 7 months ago 1 comment

Chore(deps): Bump @angular/ssr from 20.3.1 to 20.3.9 in /examples/angular

Adyen/adyen-web #3627

20.3.1 → 20.3.9 Patch PR

Open 7 months ago 3 comments

build(deps): bump the npm-packages group with 16 updates

Rs-appez/dofuspoly_frontend #61

20.3.7 → 20.3.8 Patch PR

Open 7 months ago 2 comments

deps: bump the minor-and-patch group across 1 directory with 30 updates

AnantK2243/Project_YourCloud_UI #33

20.1.5 → 20.3.8 Minor PR

Closed 7 months ago 1 comment

chore(deps): bump @angular/ssr from 19.2.19 to 20.3.8

Esp-Ing-Software-Tesis/PymesCalzado-Front #31

19.2.19 → 20.3.8 Major PR

Open 7 months ago 1 comment

deps(deps): bump the production-minor-patch group with 8 updates

Recipe-Web-App/admin-ui-service #62

20.3.7 → 20.3.8 Patch PR

Closed 7 months ago 2 comments

Bump @angular/ssr from 20.3.3 to 20.3.8

letheanVPN/lthn.io #1

20.3.3 → 20.3.8 Patch PR

Open 7 months ago 2 comments

deps(deps): bump the minor-and-patch-deps group across 1 directory with 15 updates

AppOutlet/appoutlet.github.io #68

20.3.3 → 20.3.7 Patch PR

Closed 7 months ago 1 comment

deps(deps): bump @angular/ssr from 20.3.1 to 20.3.7 in /spicy-fairytales

Phazzie/SpicyFairytales #90

20.3.1 → 20.3.7 Patch PR

Open 7 months ago 4 comments

deps(deps): bump the angular group in /website with 11 updates

AppOutlet/GetDisCorkie #73

20.3.6 → 20.3.7 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump the minor-and-patch group with 32 updates

wearejiode/syzygy #139

20.0.6 → 20.3.7 Minor PR

Closed 7 months ago 1 comment

deps: bump the minor-and-patch group across 1 directory with 29 updates

AnantK2243/Project_YourCloud_UI #32

20.1.5 → 20.3.7 Minor PR

Closed 7 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates

ValentinBancel/ValentinBancel-portefolio #98

19.1.4 → 19.2.18 Minor PR

Open 8 months ago 1 comment

deps(deps): bump @angular/ssr from 20.3.1 to 20.3.6 in /spicy-fairytales

Phazzie/SpicyFairytales #81

20.3.1 → 20.3.6 Patch PR

Open 8 months ago 4 comments

chore(deps): bump @angular/ssr from 19.2.17 to 19.2.18

TriBuiQuang/demo_angular_19 #20

19.2.17 → 19.2.18 Patch PR

Open 8 months ago 1 comment

build(deps): bump @angular/ssr from 20.3.5 to 20.3.6 in the npm_and_yarn group across 1 directory

NuschtOS/search #276

20.3.5 → 20.3.6 Patch PR

Closed 8 months ago 1 comment

build(deps): bump @angular/ssr from 19.0.6 to 19.2.18

CakekritsananXi/builder #46

19.0.6 → 19.2.18 Minor PR

Open 8 months ago

Bump @angular/ssr from 19.2.10 to 19.2.18

karimprime/Task1-Engaz #4

19.2.10 → 19.2.18 Patch PR

Open 8 months ago 1 comment

Package Details

Name:	`@angular/ssr`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@angular/ssr`
JSON API:	View JSON

Security Advisories

6

Active advisories

CRITICAL 1

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Angular server side rendering utilities

Repository:	https://github.com/angular/angular-cli
Homepage:	https://github.com/angular/angular-cli
Latest Release:	`20.0.1` 12 months ago
Dependent Repos:	0
Dependent Packages:	51
Downloads:	1,000,616
Ranking:	Top 37.4966% by dependent repos Top 53.9685% by dependent pkgs

PR Status

Open 499 (53.2%)

Merged 90 (9.6%)

Closed 312 (33.3%)

PR Types

Major 143 (15.2%)

Minor 341 (36.4%)

Patch 416 (44.3%)

@angular/ssr

Security Advisories

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

Angular SSR has an Open Redirect via X-Forwarded-Prefix

Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR

Angular SSR has a Server-Side Request Forgery (SSRF) flaw

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

Recent PRs

Package Details

Security Advisories

6

Package Information

PR Status

PR Types

`@angular/ssr`