All products

@nguniversal/common

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipelineCVE-2026-27739 · GHSA-X288-3778-4HHX @angular/ssr@nguniversal/common npm Critical Fix reported
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data LeakageCVE-2025-59052 · GHSA-68X2-MX4Q-78M7 @angular/platform-server@angular/ssr npmRed Hat High Fix reported
Angular critical CSS inlining Cross-site Scripting Vulnerability AdvisoryGHSA-R3HF-Q8Q7-FV2P @nguniversal/common npm High Fix reported