6 Total advisories
6 Vulnerabilities
0 Malware
Dependency scanning
Check whether @angular/ssr is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
CVE-2026-44437
Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix
MEDIUM 6.1
CVE-2026-33397
Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR
UNKNOWN
CVE-2026-27738
Angular SSR has an Open Redirect via X-Forwarded-Prefix
UNKNOWN
CVE-2026-27739
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
UNKNOWN
CVE-2025-62427
Angular SSR has a Server-Side Request Forgery (SSRF) flaw
UNKNOWN
CVE-2025-59052
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Browse more npm advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes