@angular/ssr

Angular server side rendering utilities

Latest 22.2.2

NPM

96%

Total Score

healthy

Frequent releases, active contributors, and a maintained Angular repository support this release.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent than it could be. The repository's strong activity and workflow controls partly compensate.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-317476 @angular/ssr is vulnerable to Path Traversal in versions 17.0.0 - 20.3.35, 21.0.0 - 21.2.22 and 22.0.0 - 22.1.6.	17.0.0 - 20.3.3521.0.0 - 21.2.2222.0.0 - 22.1.6	Medium
AIKIDO-2026-10688 @angular/ssr is vulnerable to Server-Side Request Forgery (SSRF) in versions 17.0.0 - 19.2.24, 20.0.0 - 20.3.24, 21.0.0 - 21.2.8 and 22.0.0-next.0 - 22.0.0-next.6.	17.0.0 - 19.2.2420.0.0 - 20.3.2421.0.0 - 21.2.8 +1 more	High
CVE-2026-33397 @angular/ssr is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 22.0.0-next.0 - 22.0.0-next.2, 21.0.0-next.0 - 21.2.3 and 20.0.0-next.0 - 20.3.21.	20.0.0-next.0 - 20.3.2121.0.0-next.0 - 21.2.322.0.0-next.0 - 22.0.0-next.2	Medium
CVE-2026-27739 @angular/ssr is vulnerable to Server-Side Request Forgery (SSRF) in versions 21.2.0-next.0 - 21.2.0-rc.0, 21.0.0-next.0 - 21.1.5, 20.0.0-next.0 - 20.3.17 and 0.0.0 - 19.2.21.	0.0.0 - 19.2.2120.0.0-next.0 - 20.3.1721.0.0-next.0 - 21.1.5 +1 more	Critical
CVE-2026-27738 @angular/ssr is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 21.2.0-next.0 - 21.2.0-rc.0, 21.0.0-next.0 - 21.1.5, 20.0.0-next.0 - 20.3.17 and 19.0.0-next.0 - 19.2.21.	19.0.0-next.0 - 19.2.2120.0.0-next.0 - 20.3.1721.0.0-next.0 - 21.1.5 +1 more	Medium