{"action":"Upgrade @angular/ssr to 19.2.18 or later.","affected":[{"fixed":"19.2.18","introduced":"19.0.0-next.0"},{"fixed":"20.3.6","introduced":"20.0.0-next.0"},{"fixed":"21.0.0-next.8","introduced":"21.0.0-next.0"}],"component":"@angular/ssr","cve_ids":["CVE-2025-62427"],"ecosystem":"npm","epss":0.00432,"exploited":false,"fixed_versions":["19.2.18","20.3.6","21.0.0-next.8"],"ghsa_id":"GHSA-q63q-pgmf-mxhr","id":"tcs_01M5KG5BVWFQWXZCYDC6C6C36Z","modified_at":"2025-10-16T21:55:01Z","published_at":"2025-10-16T21:28:19Z","references":["https://osv.dev/vulnerability/GHSA-q63q-pgmf-mxhr","https://github.com/angular/angular-cli/security/advisories/GHSA-q63q-pgmf-mxhr","https://nvd.nist.gov/vuln/detail/CVE-2025-62427","https://github.com/angular/angular-cli/commit/5271547c80662de10cb3bcb648779a83f6efedfb","https://github.com/angular/angular-cli"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-q63q-pgmf-mxhr","url":"https://osv.dev/vulnerability/GHSA-q63q-pgmf-mxhr"},{"source":"nvd","source_id":"CVE-2025-62427","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62427"}],"summary":"Angular SSR has a Server-Side Request Forgery (SSRF) flaw"}