CVE-2025-62427
1 advisory.
npm/@angular/ssr CVE-2025-62427: high, EPSS 0.43%
Angular SSR has a Server-Side Request Forgery (SSRF) flaw
Action: Upgrade @angular/ssr to 19.2.18 or later.
npm i @angular/ssr@19.2.18npm i @angular/ssr@20.3.6npm i @angular/ssr@21.0.0-next.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 19.0.0-next.0 | 19.2.18 | - |
| 20.0.0-next.0 | 20.3.6 | - |
| 21.0.0-next.0 | 21.0.0-next.8 | - |
Fixed versions
| 19.2.18 | 20.3.6 | 21.0.0-next.8 |
Sources
- osv: GHSA-q63q-pgmf-mxhr
- https://github.com/angular/angular-cli/security/advisories/GHSA-q63q-pgmf-mxhr
- https://nvd.nist.gov/vuln/detail/CVE-2025-62427
- https://github.com/angular/angular-cli/commit/5271547c80662de10cb3bcb648779a83f6efedfb
- https://github.com/angular/angular-cli
CVE-2025-62427 · published · modified · JSON