tocsin

CVE-2026-41423

1 advisory.

npm/@angular/platform-server CVE-2026-41423: high, EPSS 0.48%

Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

Action: Upgrade @angular/platform-server to 19.2.21 or later.

npm i @angular/platform-server@22.0.0-next.8
npm i @angular/platform-server@21.2.9
npm i @angular/platform-server@20.3.19
npm i @angular/platform-server@19.2.21

Affected

introducedfixedlast affected
22.0.0-next.022.0.0-next.8-
21.0.0-next.021.2.9-
20.0.0-next.020.3.19-
19.0.0-next.019.2.21-
0-18.2.14

Fixed versions

22.0.0-next.821.2.920.3.1919.2.21

Sources

CVE-2026-41423 · published · modified · JSON