{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27739", "tracking": { "current_release_date": "2026-03-27T20:17:23.971157Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27739", "initial_release_date": "2026-02-25T17:38:31.472533Z", "revision_history": [ { "date": "2026-02-25T17:38:31.472533Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (6).| References created (4).| CWES updated (1)." }, { "date": "2026-02-25T17:38:39.058881Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-25T18:30:36.542839Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-02-25T18:30:40.691607Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-25T23:39:38.141382Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (6).| CWES updated (1)." }, { "date": "2026-02-25T23:39:40.553065Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-02-26T00:23:31.828148Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Products created (3).| References created (5).| CWES updated (1)." }, { "date": "2026-02-26T01:13:14.879395Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (306).| Products created (26).| References created (6).| CWES updated (1)." }, { "date": "2026-02-26T12:05:48.579124Z", "number": "9", "summary": "Source connected.| CVE status created. (valid)| Products connected (4).| References created (5)." }, { "date": "2026-02-26T12:06:02.669172Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-02-26T14:13:38.866294Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-26T14:13:52.663427Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-02-27T18:39:01.530206Z", "number": "13", "summary": "Unknown change." }, { "date": "2026-02-27T18:39:03.778165Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-02T19:27:11.492725Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-03-20T09:39:57.603412Z", "number": "16", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:40:01.054251Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-03-24T07:44:16.446706Z", "number": "18", "summary": "NCSC Score updated." }, { "date": "2026-03-27T19:49:17.745896Z", "number": "19", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (7).| Products created (1).| References created (7).| CWES updated (1)." }, { "date": "2026-03-27T19:49:21.468679Z", "number": "20", "summary": "NCSC Score updated." } ], "status": "interim", "version": "20" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<19.2.21", "product": { "name": "vers:unknown/>=0|<19.2.21", "product_id": "CSAFPID-5721021" } }, { "category": "product_version_range", "name": "vers:unknown/>=20.0.0-next.0|<20.3.17", "product": { "name": "vers:unknown/>=20.0.0-next.0|<20.3.17", "product_id": "CSAFPID-5721019" } }, { "category": "product_version_range", "name": "vers:unknown/>=21.0.0-next.0|<21.1.5", "product": { "name": "vers:unknown/>=21.0.0-next.0|<21.1.5", "product_id": "CSAFPID-5721018" } }, { "category": "product_version_range", "name": "vers:unknown/>=21.2.0-next.0|<21.2.0-rc.1", "product": { "name": "vers:unknown/>=21.2.0-next.0|<21.2.0-rc.1", "product_id": "CSAFPID-5721017" } } ], "category": "product_name", "name": "@angular/ssr" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=16.2.0", "product": { "name": "vers:unknown/<=16.2.0", "product_id": "CSAFPID-5706535" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<=16.2.0", "product": { "name": "vers:unknown/>=0|<=16.2.0", "product_id": "CSAFPID-5721022" } } ], "category": "product_name", "name": "@nguniversal/common" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=16.2.0", "product": { "name": "vers:unknown/<=16.2.0", "product_id": "CSAFPID-5706536" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<=16.2.0", "product": { "name": "vers:unknown/>=0|<=16.2.0", "product_id": "CSAFPID-5721023" } } ], "category": "product_name", "name": "@nguniversal/express-engine" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.0.13", "product": { "name": "vers:unknown/0.0.13", "product_id": "CSAFPID-5138387" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.14", "product": { "name": "vers:unknown/0.0.14", "product_id": "CSAFPID-5138388" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.15", "product": { "name": "vers:unknown/0.0.15", "product_id": "CSAFPID-5138389" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.16", "product": { "name": "vers:unknown/0.0.16", "product_id": "CSAFPID-5138390" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.17", "product": { "name": "vers:unknown/0.0.17", "product_id": "CSAFPID-5138391" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.18", "product": { "name": "vers:unknown/0.0.18", "product_id": "CSAFPID-5138392" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.19", "product": { "name": "vers:unknown/0.0.19", "product_id": "CSAFPID-5138393" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.20", "product": { "name": "vers:unknown/0.0.20", "product_id": "CSAFPID-5138394" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.21", "product": { "name": "vers:unknown/0.0.21", "product_id": "CSAFPID-5138395" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.22", "product": { "name": "vers:unknown/0.0.22", "product_id": "CSAFPID-5138396" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.23", "product": { "name": "vers:unknown/0.0.23", "product_id": "CSAFPID-5138397" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.24", "product": { "name": "vers:unknown/0.0.24", "product_id": "CSAFPID-5138398" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.25", "product": { "name": "vers:unknown/0.0.25", "product_id": "CSAFPID-5138399" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-beta.9", "product": { "name": "vers:unknown/1.0.0-beta.9", "product_id": "CSAFPID-5138400" } }, { "category": "product_version_range", "name": "vers:unknown/12.2.0-next.3", "product": { "name": "vers:unknown/12.2.0-next.3", "product_id": "CSAFPID-5138401" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.0", "product": { "name": "vers:unknown/13.0.0-next.0", "product_id": "CSAFPID-5138402" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.1", "product": { "name": "vers:unknown/13.0.0-next.1", "product_id": "CSAFPID-5138403" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.2", "product": { "name": "vers:unknown/13.0.0-next.2", "product_id": "CSAFPID-5138404" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.3", "product": { "name": "vers:unknown/13.0.0-next.3", "product_id": "CSAFPID-5138405" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.4", "product": { "name": "vers:unknown/13.0.0-next.4", "product_id": "CSAFPID-5138406" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.5", "product": { "name": "vers:unknown/13.0.0-next.5", "product_id": "CSAFPID-5138407" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.6", "product": { "name": "vers:unknown/13.0.0-next.6", "product_id": "CSAFPID-5138408" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.7", "product": { "name": "vers:unknown/13.0.0-next.7", "product_id": "CSAFPID-5138409" } }, { "category": "product_version_range", "name": "vers:unknown/13.0.0-next.8", "product": { "name": "vers:unknown/13.0.0-next.8", "product_id": "CSAFPID-5138410" } }, { "category": "product_version_range", "name": "vers:unknown/13.1.0-next.0", "product": { "name": "vers:unknown/13.1.0-next.0", "product_id": "CSAFPID-5138411" } }, { "category": "product_version_range", "name": "vers:unknown/13.1.0-next.1", "product": { "name": "vers:unknown/13.1.0-next.1", "product_id": "CSAFPID-5138412" } }, { "category": "product_version_range", "name": "vers:unknown/13.1.0-next.2", "product": { "name": "vers:unknown/13.1.0-next.2", "product_id": "CSAFPID-5138413" } }, { "category": "product_version_range", "name": "vers:unknown/13.1.0-next.3", "product": { "name": "vers:unknown/13.1.0-next.3", "product_id": "CSAFPID-5138414" } }, { "category": "product_version_range", "name": "vers:unknown/13.2.0-next.0", "product": { "name": "vers:unknown/13.2.0-next.0", "product_id": "CSAFPID-5138415" } }, { "category": "product_version_range", "name": "vers:unknown/13.2.0-next.1", "product": { "name": "vers:unknown/13.2.0-next.1", "product_id": "CSAFPID-5138416" } }, { "category": "product_version_range", "name": "vers:unknown/13.2.0-next.2", "product": { "name": "vers:unknown/13.2.0-next.2", "product_id": "CSAFPID-5138417" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.0", "product": { "name": "vers:unknown/14.0.0-next.0", "product_id": "CSAFPID-5138418" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.1", "product": { "name": "vers:unknown/14.0.0-next.1", "product_id": "CSAFPID-5138419" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.10", "product": { "name": "vers:unknown/14.0.0-next.10", "product_id": "CSAFPID-5138420" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.11", "product": { "name": "vers:unknown/14.0.0-next.11", "product_id": "CSAFPID-5138421" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.12", "product": { "name": "vers:unknown/14.0.0-next.12", "product_id": "CSAFPID-5138422" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.2", "product": { "name": "vers:unknown/14.0.0-next.2", "product_id": "CSAFPID-5138423" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.3", "product": { "name": "vers:unknown/14.0.0-next.3", "product_id": "CSAFPID-5138424" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.4", "product": { "name": "vers:unknown/14.0.0-next.4", "product_id": "CSAFPID-5138425" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.5", "product": { "name": "vers:unknown/14.0.0-next.5", "product_id": "CSAFPID-5138426" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.6", "product": { "name": "vers:unknown/14.0.0-next.6", "product_id": "CSAFPID-5138427" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.7", "product": { "name": "vers:unknown/14.0.0-next.7", "product_id": "CSAFPID-5138428" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.8", "product": { "name": "vers:unknown/14.0.0-next.8", "product_id": "CSAFPID-5138429" } }, { "category": "product_version_range", "name": "vers:unknown/14.0.0-next.9", "product": { "name": "vers:unknown/14.0.0-next.9", "product_id": "CSAFPID-5138430" } }, { "category": "product_version_range", "name": "vers:unknown/14.1.0-next.0", "product": { "name": "vers:unknown/14.1.0-next.0", "product_id": "CSAFPID-5138431" } }, { "category": "product_version_range", "name": "vers:unknown/14.1.0-next.1", "product": { "name": "vers:unknown/14.1.0-next.1", "product_id": "CSAFPID-5138432" } }, { "category": "product_version_range", "name": "vers:unknown/14.1.0-next.2", "product": { "name": "vers:unknown/14.1.0-next.2", "product_id": "CSAFPID-5138433" } }, { "category": "product_version_range", "name": "vers:unknown/14.1.0-next.3", "product": { "name": "vers:unknown/14.1.0-next.3", "product_id": "CSAFPID-5138434" } }, { "category": "product_version_range", "name": "vers:unknown/14.1.0-next.4", "product": { "name": "vers:unknown/14.1.0-next.4", "product_id": "CSAFPID-5138435" } }, { "category": "product_version_range", "name": "vers:unknown/14.2.0-next.0", "product": { "name": "vers:unknown/14.2.0-next.0", "product_id": "CSAFPID-5138436" } }, { "category": "product_version_range", "name": "vers:unknown/14.2.0-next.1", "product": { "name": "vers:unknown/14.2.0-next.1", "product_id": "CSAFPID-5138437" } }, { "category": "product_version_range", "name": "vers:unknown/14.2.0-next.2", "product": { "name": "vers:unknown/14.2.0-next.2", "product_id": "CSAFPID-5138438" } }, { "category": "product_version_range", "name": "vers:unknown/15.0.0-next.0", "product": { "name": "vers:unknown/15.0.0-next.0", "product_id": "CSAFPID-5138439" } }, { "category": "product_version_range", "name": "vers:unknown/15.0.0-next.1", "product": { "name": "vers:unknown/15.0.0-next.1", "product_id": "CSAFPID-5138440" } }, { "category": "product_version_range", "name": "vers:unknown/15.0.0-next.2", "product": { "name": "vers:unknown/15.0.0-next.2", "product_id": "CSAFPID-5138441" } }, { "category": "product_version_range", "name": "vers:unknown/15.0.0-next.3", "product": { "name": "vers:unknown/15.0.0-next.3", "product_id": "CSAFPID-5138442" } }, { "category": "product_version_range", "name": "vers:unknown/15.0.0-next.4", "product": { "name": "vers:unknown/15.0.0-next.4", "product_id": "CSAFPID-5138443" } }, { "category": "product_version_range", "name": "vers:unknown/15.1.0-next.0", "product": { "name": "vers:unknown/15.1.0-next.0", "product_id": "CSAFPID-5138444" } }, { "category": "product_version_range", "name": "vers:unknown/15.1.0-next.1", "product": { "name": "vers:unknown/15.1.0-next.1", "product_id": "CSAFPID-5138445" } }, { "category": "product_version_range", "name": "vers:unknown/15.1.0-next.2", "product": { "name": "vers:unknown/15.1.0-next.2", "product_id": "CSAFPID-5138446" } }, { "category": "product_version_range", "name": "vers:unknown/15.1.0-next.3", "product": { "name": "vers:unknown/15.1.0-next.3", "product_id": "CSAFPID-5138447" } }, { "category": "product_version_range", "name": "vers:unknown/15.2.0-next.0", "product": { "name": "vers:unknown/15.2.0-next.0", "product_id": "CSAFPID-5138448" } }, { "category": "product_version_range", "name": "vers:unknown/15.2.0-next.1", "product": { "name": "vers:unknown/15.2.0-next.1", "product_id": "CSAFPID-5138449" } }, { "category": "product_version_range", "name": "vers:unknown/15.2.0-next.2", "product": { "name": "vers:unknown/15.2.0-next.2", "product_id": "CSAFPID-5138450" } }, { "category": "product_version_range", "name": "vers:unknown/15.2.0-next.3", "product": { "name": "vers:unknown/15.2.0-next.3", "product_id": "CSAFPID-5138451" } }, { "category": "product_version_range", "name": "vers:unknown/15.2.0-next.4", "product": { "name": "vers:unknown/15.2.0-next.4", "product_id": "CSAFPID-5138452" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.0", "product": { "name": "vers:unknown/16.0.0-next.0", "product_id": "CSAFPID-5138453" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.1", "product": { "name": "vers:unknown/16.0.0-next.1", "product_id": "CSAFPID-5138454" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.2", "product": { "name": "vers:unknown/16.0.0-next.2", "product_id": "CSAFPID-5138455" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.3", "product": { "name": "vers:unknown/16.0.0-next.3", "product_id": "CSAFPID-5138456" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.4", "product": { "name": "vers:unknown/16.0.0-next.4", "product_id": "CSAFPID-5138457" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.5", "product": { "name": "vers:unknown/16.0.0-next.5", "product_id": "CSAFPID-5138458" } }, { "category": "product_version_range", "name": "vers:unknown/16.0.0-next.6", "product": { "name": "vers:unknown/16.0.0-next.6", "product_id": "CSAFPID-5138459" } }, { "category": "product_version_range", "name": "vers:unknown/16.1.0-next.0", "product": { "name": "vers:unknown/16.1.0-next.0", "product_id": "CSAFPID-5138460" } }, { "category": "product_version_range", "name": "vers:unknown/16.1.0-next.1", "product": { "name": "vers:unknown/16.1.0-next.1", "product_id": "CSAFPID-5138461" } }, { "category": "product_version_range", "name": "vers:unknown/16.1.0-next.2", "product": { "name": "vers:unknown/16.1.0-next.2", "product_id": "CSAFPID-5138462" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0", "product": { "name": "vers:unknown/16.2.0", "product_id": "CSAFPID-5723332" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-next.0", "product": { "name": "vers:unknown/16.2.0-next.0", "product_id": "CSAFPID-5138463" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-next.1", "product": { "name": "vers:unknown/16.2.0-next.1", "product_id": "CSAFPID-5138464" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-next.2", "product": { "name": "vers:unknown/16.2.0-next.2", "product_id": "CSAFPID-5138465" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-next.3", "product": { "name": "vers:unknown/16.2.0-next.3", "product_id": "CSAFPID-5138466" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-next.4", "product": { "name": "vers:unknown/16.2.0-next.4", "product_id": "CSAFPID-5138467" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-rc.0", "product": { "name": "vers:unknown/16.2.0-rc.0", "product_id": "CSAFPID-5723333" } }, { "category": "product_version_range", "name": "vers:unknown/16.2.0-rc.1", "product": { "name": "vers:unknown/16.2.0-rc.1", "product_id": "CSAFPID-5723334" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.0", "product": { "name": "vers:unknown/20.0.0-next.0", "product_id": "CSAFPID-5104829" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.1", "product": { "name": "vers:unknown/20.0.0-next.1", "product_id": "CSAFPID-5104830" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.2", "product": { "name": "vers:unknown/20.0.0-next.2", "product_id": "CSAFPID-5104831" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.3", "product": { "name": "vers:unknown/20.0.0-next.3", "product_id": "CSAFPID-5104832" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.4", "product": { "name": "vers:unknown/20.0.0-next.4", "product_id": "CSAFPID-5104833" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.5", "product": { "name": "vers:unknown/20.0.0-next.5", "product_id": "CSAFPID-5104834" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.6", "product": { "name": "vers:unknown/20.0.0-next.6", "product_id": "CSAFPID-5104835" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.7", "product": { "name": "vers:unknown/20.0.0-next.7", "product_id": "CSAFPID-5104836" } }, { "category": "product_version_range", "name": "vers:unknown/20.0.0-next.8", "product": { "name": "vers:unknown/20.0.0-next.8", "product_id": "CSAFPID-5104837" } }, { "category": "product_version_range", "name": "vers:unknown/20.1.0-next.0", "product": { "name": "vers:unknown/20.1.0-next.0", "product_id": "CSAFPID-5104838" } }, { "category": "product_version_range", "name": "vers:unknown/20.1.0-next.1", "product": { "name": "vers:unknown/20.1.0-next.1", "product_id": "CSAFPID-5104839" } }, { "category": "product_version_range", "name": "vers:unknown/20.1.0-next.2", "product": { "name": "vers:unknown/20.1.0-next.2", "product_id": "CSAFPID-5104840" } }, { "category": "product_version_range", "name": "vers:unknown/20.1.0-next.3", "product": { "name": "vers:unknown/20.1.0-next.3", "product_id": "CSAFPID-5104841" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0", "product": { "name": "vers:unknown/20.2.0", "product_id": "CSAFPID-5104842" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0-next.0", "product": { "name": "vers:unknown/20.2.0-next.0", "product_id": "CSAFPID-5104843" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0-next.1", "product": { "name": "vers:unknown/20.2.0-next.1", "product_id": "CSAFPID-5104844" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0-next.2", "product": { "name": "vers:unknown/20.2.0-next.2", "product_id": "CSAFPID-5104845" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0-next.3", "product": { "name": "vers:unknown/20.2.0-next.3", "product_id": "CSAFPID-5104846" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0-rc.0", "product": { "name": "vers:unknown/20.2.0-rc.0", "product_id": "CSAFPID-5104847" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.0-rc.1", "product": { "name": "vers:unknown/20.2.0-rc.1", "product_id": "CSAFPID-5104848" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.1", "product": { "name": "vers:unknown/20.2.1", "product_id": "CSAFPID-5104849" } }, { "category": "product_version_range", "name": "vers:unknown/20.2.2", "product": { "name": "vers:unknown/20.2.2", "product_id": "CSAFPID-5104850" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.0", "product": { "name": "vers:unknown/20.3.0", "product_id": "CSAFPID-5104851" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.0-rc.0", "product": { "name": "vers:unknown/20.3.0-rc.0", "product_id": "CSAFPID-5104852" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.1", "product": { "name": "vers:unknown/20.3.1", "product_id": "CSAFPID-5104853" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.10", "product": { "name": "vers:unknown/20.3.10", "product_id": "CSAFPID-5723335" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.11", "product": { "name": "vers:unknown/20.3.11", "product_id": "CSAFPID-5723336" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.12", "product": { "name": "vers:unknown/20.3.12", "product_id": "CSAFPID-5723337" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.13", "product": { "name": "vers:unknown/20.3.13", "product_id": "CSAFPID-5723338" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.2", "product": { "name": "vers:unknown/20.3.2", "product_id": "CSAFPID-5104854" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.3", "product": { "name": "vers:unknown/20.3.3", "product_id": "CSAFPID-5104855" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.4", "product": { "name": "vers:unknown/20.3.4", "product_id": "CSAFPID-5104856" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.5", "product": { "name": "vers:unknown/20.3.5", "product_id": "CSAFPID-5104857" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.6", "product": { "name": "vers:unknown/20.3.6", "product_id": "CSAFPID-5723339" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.7", "product": { "name": "vers:unknown/20.3.7", "product_id": "CSAFPID-5723340" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.8", "product": { "name": "vers:unknown/20.3.8", "product_id": "CSAFPID-5723341" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.9", "product": { "name": "vers:unknown/20.3.9", "product_id": "CSAFPID-5723342" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.0", "product": { "name": "vers:unknown/21.0.0-next.0", "product_id": "CSAFPID-5104858" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.1", "product": { "name": "vers:unknown/21.0.0-next.1", "product_id": "CSAFPID-5104859" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.2", "product": { "name": "vers:unknown/21.0.0-next.2", "product_id": "CSAFPID-5104860" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.3", "product": { "name": "vers:unknown/21.0.0-next.3", "product_id": "CSAFPID-5104861" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.4", "product": { "name": "vers:unknown/21.0.0-next.4", "product_id": "CSAFPID-5104862" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.5", "product": { "name": "vers:unknown/21.0.0-next.5", "product_id": "CSAFPID-5104863" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.6", "product": { "name": "vers:unknown/21.0.0-next.6", "product_id": "CSAFPID-5104864" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.7", "product": { "name": "vers:unknown/21.0.0-next.7", "product_id": "CSAFPID-5104865" } }, { "category": "product_version_range", "name": "vers:unknown/21.0.0-next.8", "product": { "name": "vers:unknown/21.0.0-next.8", "product_id": "CSAFPID-5723343" } }, { "category": "product_version_range", "name": "vers:unknown/21.1.0-next.0", "product": { "name": "vers:unknown/21.1.0-next.0", "product_id": "CSAFPID-5723344" } }, { "category": "product_version_range", "name": "vers:unknown/21.1.0-next.1", "product": { "name": "vers:unknown/21.1.0-next.1", "product_id": "CSAFPID-5723345" } }, { "category": "product_version_range", "name": "vers:unknown/9.0.0-next.7", "product": { "name": "vers:unknown/9.0.0-next.7", "product_id": "CSAFPID-5138496" } }, { "category": "product_version_range", "name": "vers:unknown/<19.2.21", "product": { "name": "vers:unknown/<19.2.21", "product_id": "CSAFPID-5706534" } }, { "category": "product_version_range", "name": "vers:unknown/>=20.0.0-next.0|<20.3.17", "product": { "name": "vers:unknown/>=20.0.0-next.0|<20.3.17", "product_id": "CSAFPID-5706533" } }, { "category": "product_version_range", "name": "vers:unknown/>=21.0.0-next.0|<21.1.5", "product": { "name": "vers:unknown/>=21.0.0-next.0|<21.1.5", "product_id": "CSAFPID-5706532" } }, { "category": "product_version_range", "name": "vers:unknown/>=21.2.0-next.2|<21.2.0-rc.0", "product": { "name": "vers:unknown/>=21.2.0-next.2|<21.2.0-rc.0", "product_id": "CSAFPID-5706531" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.27", "product": { "name": "vers:unknown/v0.0.27", "product_id": "CSAFPID-5138497" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.29", "product": { "name": "vers:unknown/v0.0.29", "product_id": "CSAFPID-5138498" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.30", "product": { "name": "vers:unknown/v0.0.30", "product_id": "CSAFPID-5138499" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.31", "product": { "name": "vers:unknown/v0.0.31", "product_id": "CSAFPID-5138500" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.33", "product": { "name": "vers:unknown/v0.0.33", "product_id": "CSAFPID-5138501" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.34", "product": { "name": "vers:unknown/v0.0.34", "product_id": "CSAFPID-5138502" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.35", "product": { "name": "vers:unknown/v0.0.35", "product_id": "CSAFPID-5138503" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.37", "product": { "name": "vers:unknown/v0.0.37", "product_id": "CSAFPID-5138504" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.39", "product": { "name": "vers:unknown/v0.0.39", "product_id": "CSAFPID-5138505" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0", "product": { "name": "vers:unknown/v0.1.0", "product_id": "CSAFPID-5138506" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0", "product": { "name": "vers:unknown/v1.0.0", "product_id": "CSAFPID-5138507" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.0", "product": { "name": "vers:unknown/v1.0.0-beta.0", "product_id": "CSAFPID-5138508" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.1", "product": { "name": "vers:unknown/v1.0.0-beta.1", "product_id": "CSAFPID-5138509" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.10", "product": { "name": "vers:unknown/v1.0.0-beta.10", "product_id": "CSAFPID-5138510" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.10-webpack", "product": { "name": "vers:unknown/v1.0.0-beta.10-webpack", "product_id": "CSAFPID-5138511" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.11-webpack.2", "product": { "name": "vers:unknown/v1.0.0-beta.11-webpack.2", "product_id": "CSAFPID-5138512" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.14", "product": { "name": "vers:unknown/v1.0.0-beta.14", "product_id": "CSAFPID-5138513" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.15", "product": { "name": "vers:unknown/v1.0.0-beta.15", "product_id": "CSAFPID-5138514" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.17", "product": { "name": "vers:unknown/v1.0.0-beta.17", "product_id": "CSAFPID-5138515" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.18", "product": { "name": "vers:unknown/v1.0.0-beta.18", "product_id": "CSAFPID-5138516" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.19", "product": { "name": "vers:unknown/v1.0.0-beta.19", "product_id": "CSAFPID-5138517" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.2-mobile", "product": { "name": "vers:unknown/v1.0.0-beta.2-mobile", "product_id": "CSAFPID-5138518" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.2-mobile.3", "product": { "name": "vers:unknown/v1.0.0-beta.2-mobile.3", "product_id": "CSAFPID-5138519" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.20-1", "product": { "name": "vers:unknown/v1.0.0-beta.20-1", "product_id": "CSAFPID-5138520" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.21", "product": { "name": "vers:unknown/v1.0.0-beta.21", "product_id": "CSAFPID-5138521" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.22", "product": { "name": "vers:unknown/v1.0.0-beta.22", "product_id": "CSAFPID-5138522" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.22-1", "product": { "name": "vers:unknown/v1.0.0-beta.22-1", "product_id": "CSAFPID-5138523" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.23", "product": { "name": "vers:unknown/v1.0.0-beta.23", "product_id": "CSAFPID-5138524" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.26", "product": { "name": "vers:unknown/v1.0.0-beta.26", "product_id": "CSAFPID-5138525" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.28", "product": { "name": "vers:unknown/v1.0.0-beta.28", "product_id": "CSAFPID-5138526" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.30", "product": { "name": "vers:unknown/v1.0.0-beta.30", "product_id": "CSAFPID-5138527" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.31", "product": { "name": "vers:unknown/v1.0.0-beta.31", "product_id": "CSAFPID-5138528" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.32", "product": { "name": "vers:unknown/v1.0.0-beta.32", "product_id": "CSAFPID-5138529" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.4", "product": { "name": "vers:unknown/v1.0.0-beta.4", "product_id": "CSAFPID-5138530" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.5", "product": { "name": "vers:unknown/v1.0.0-beta.5", "product_id": "CSAFPID-5138531" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-beta.6", "product": { "name": "vers:unknown/v1.0.0-beta.6", "product_id": "CSAFPID-5138532" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-rc.0", "product": { "name": "vers:unknown/v1.0.0-rc.0", "product_id": "CSAFPID-5138533" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-rc.1", "product": { "name": "vers:unknown/v1.0.0-rc.1", "product_id": "CSAFPID-5138534" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-rc.2", "product": { "name": "vers:unknown/v1.0.0-rc.2", "product_id": "CSAFPID-5138535" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-rc.4", "product": { "name": "vers:unknown/v1.0.0-rc.4", "product_id": "CSAFPID-5138536" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1", "product": { "name": "vers:unknown/v1.0.1", "product_id": "CSAFPID-5138537" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.1", "product": { "name": "vers:unknown/v1.4.0-beta.1", "product_id": "CSAFPID-5138538" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-beta.0", "product": { "name": "vers:unknown/v1.5.0-beta.0", "product_id": "CSAFPID-5138539" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.0", "product": { "name": "vers:unknown/v10.0.0-next.0", "product_id": "CSAFPID-5138540" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.1", "product": { "name": "vers:unknown/v10.0.0-next.1", "product_id": "CSAFPID-5138541" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.2", "product": { "name": "vers:unknown/v10.0.0-next.2", "product_id": "CSAFPID-5138542" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.3", "product": { "name": "vers:unknown/v10.0.0-next.3", "product_id": "CSAFPID-5138543" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.4", "product": { "name": "vers:unknown/v10.0.0-next.4", "product_id": "CSAFPID-5138544" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.5", "product": { "name": "vers:unknown/v10.0.0-next.5", "product_id": "CSAFPID-5138545" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-next.6", "product": { "name": "vers:unknown/v10.0.0-next.6", "product_id": "CSAFPID-5138546" } }, { "category": "product_version_range", "name": "vers:unknown/v10.0.0-rc.0", "product": { "name": "vers:unknown/v10.0.0-rc.0", "product_id": "CSAFPID-5138547" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.0", "product": { "name": "vers:unknown/v10.1.0-next.0", "product_id": "CSAFPID-5138548" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.1", "product": { "name": "vers:unknown/v10.1.0-next.1", "product_id": "CSAFPID-5138549" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.2", "product": { "name": "vers:unknown/v10.1.0-next.2", "product_id": "CSAFPID-5138550" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.3", "product": { "name": "vers:unknown/v10.1.0-next.3", "product_id": "CSAFPID-5138551" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.4", "product": { "name": "vers:unknown/v10.1.0-next.4", "product_id": "CSAFPID-5138552" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.5", "product": { "name": "vers:unknown/v10.1.0-next.5", "product_id": "CSAFPID-5138553" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.6", "product": { "name": "vers:unknown/v10.1.0-next.6", "product_id": "CSAFPID-5138554" } }, { "category": "product_version_range", "name": "vers:unknown/v10.1.0-next.7", "product": { "name": "vers:unknown/v10.1.0-next.7", "product_id": "CSAFPID-5138555" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.0", "product": { "name": "vers:unknown/v11.0.0-next.0", "product_id": "CSAFPID-5138556" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.1", "product": { "name": "vers:unknown/v11.0.0-next.1", "product_id": "CSAFPID-5138557" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.2", "product": { "name": "vers:unknown/v11.0.0-next.2", "product_id": "CSAFPID-5138558" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.3", "product": { "name": "vers:unknown/v11.0.0-next.3", "product_id": "CSAFPID-5138559" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.4", "product": { "name": "vers:unknown/v11.0.0-next.4", "product_id": "CSAFPID-5138560" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.5", "product": { "name": "vers:unknown/v11.0.0-next.5", "product_id": "CSAFPID-5138561" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.6", "product": { "name": "vers:unknown/v11.0.0-next.6", "product_id": "CSAFPID-5138562" } }, { "category": "product_version_range", "name": "vers:unknown/v11.0.0-next.7", "product": { "name": "vers:unknown/v11.0.0-next.7", "product_id": "CSAFPID-5138563" } }, { "category": "product_version_range", "name": "vers:unknown/v11.1.0-next.0", "product": { "name": "vers:unknown/v11.1.0-next.0", "product_id": "CSAFPID-5138564" } }, { "category": "product_version_range", "name": "vers:unknown/v11.1.0-next.1", "product": { "name": "vers:unknown/v11.1.0-next.1", "product_id": "CSAFPID-5138565" } }, { "category": "product_version_range", "name": "vers:unknown/v11.1.0-next.2", "product": { "name": "vers:unknown/v11.1.0-next.2", "product_id": "CSAFPID-5138566" } }, { "category": "product_version_range", "name": "vers:unknown/v11.1.0-next.3", "product": { "name": "vers:unknown/v11.1.0-next.3", "product_id": "CSAFPID-5138567" } }, { "category": "product_version_range", "name": "vers:unknown/v11.1.0-next.4", "product": { "name": "vers:unknown/v11.1.0-next.4", "product_id": "CSAFPID-5138568" } }, { "category": "product_version_range", "name": "vers:unknown/v11.2.0-next.0", "product": { "name": "vers:unknown/v11.2.0-next.0", "product_id": "CSAFPID-5138569" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.0", "product": { "name": "vers:unknown/v12.0.0-next.0", "product_id": "CSAFPID-5138570" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.1", "product": { "name": "vers:unknown/v12.0.0-next.1", "product_id": "CSAFPID-5138571" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.2", "product": { "name": "vers:unknown/v12.0.0-next.2", "product_id": "CSAFPID-5138572" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.3", "product": { "name": "vers:unknown/v12.0.0-next.3", "product_id": "CSAFPID-5138573" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.4", "product": { "name": "vers:unknown/v12.0.0-next.4", "product_id": "CSAFPID-5138574" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.5", "product": { "name": "vers:unknown/v12.0.0-next.5", "product_id": "CSAFPID-5138575" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.6", "product": { "name": "vers:unknown/v12.0.0-next.6", "product_id": "CSAFPID-5138576" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.7", "product": { "name": "vers:unknown/v12.0.0-next.7", "product_id": "CSAFPID-5138577" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.8", "product": { "name": "vers:unknown/v12.0.0-next.8", "product_id": "CSAFPID-5138578" } }, { "category": "product_version_range", "name": "vers:unknown/v12.0.0-next.9", "product": { "name": "vers:unknown/v12.0.0-next.9", "product_id": "CSAFPID-5138579" } }, { "category": "product_version_range", "name": "vers:unknown/v12.1.0", "product": { "name": "vers:unknown/v12.1.0", "product_id": "CSAFPID-5138580" } }, { "category": "product_version_range", "name": "vers:unknown/v12.1.0-next.2", "product": { "name": "vers:unknown/v12.1.0-next.2", "product_id": "CSAFPID-5138581" } }, { "category": "product_version_range", "name": "vers:unknown/v12.1.0-next.3", "product": { "name": "vers:unknown/v12.1.0-next.3", "product_id": "CSAFPID-5138582" } }, { "category": "product_version_range", "name": "vers:unknown/v12.1.0-next.4", "product": { "name": "vers:unknown/v12.1.0-next.4", "product_id": "CSAFPID-5138583" } }, { "category": "product_version_range", "name": "vers:unknown/v12.1.0-next.5", "product": { "name": "vers:unknown/v12.1.0-next.5", "product_id": "CSAFPID-5138584" } }, { "category": "product_version_range", "name": "vers:unknown/v12.1.0-next.6", "product": { "name": "vers:unknown/v12.1.0-next.6", "product_id": "CSAFPID-5138585" } }, { "category": "product_version_range", "name": "vers:unknown/v12.2.0-next.0", "product": { "name": "vers:unknown/v12.2.0-next.0", "product_id": "CSAFPID-5138586" } }, { "category": "product_version_range", "name": "vers:unknown/v12.2.0-next.1", "product": { "name": "vers:unknown/v12.2.0-next.1", "product_id": "CSAFPID-5138587" } }, { "category": "product_version_range", "name": "vers:unknown/v12.2.0-next.2", "product": { "name": "vers:unknown/v12.2.0-next.2", "product_id": "CSAFPID-5138588" } }, { "category": "product_version_range", "name": "vers:unknown/v20.3.14", "product": { "name": "vers:unknown/v20.3.14", "product_id": "CSAFPID-5723346" } }, { "category": "product_version_range", "name": "vers:unknown/v20.3.15", "product": { "name": "vers:unknown/v20.3.15", "product_id": "CSAFPID-5723347" } }, { "category": "product_version_range", "name": "vers:unknown/v20.3.16", "product": { "name": "vers:unknown/v20.3.16", "product_id": "CSAFPID-5723348" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.0", "product": { "name": "vers:unknown/v21.1.0", "product_id": "CSAFPID-5723349" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.0-next.2", "product": { "name": "vers:unknown/v21.1.0-next.2", "product_id": "CSAFPID-5723350" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.0-next.3", "product": { "name": "vers:unknown/v21.1.0-next.3", "product_id": "CSAFPID-5723351" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.0-rc.0", "product": { "name": "vers:unknown/v21.1.0-rc.0", "product_id": "CSAFPID-5723352" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.1", "product": { "name": "vers:unknown/v21.1.1", "product_id": "CSAFPID-5723353" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.2", "product": { "name": "vers:unknown/v21.1.2", "product_id": "CSAFPID-5723354" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.3", "product": { "name": "vers:unknown/v21.1.3", "product_id": "CSAFPID-5723355" } }, { "category": "product_version_range", "name": "vers:unknown/v21.1.4", "product": { "name": "vers:unknown/v21.1.4", "product_id": "CSAFPID-5723356" } }, { "category": "product_version_range", "name": "vers:unknown/v21.2.0-next.2", "product": { "name": "vers:unknown/v21.2.0-next.2", "product_id": "CSAFPID-5723357" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0", "product": { "name": "vers:unknown/v6.0.0", "product_id": "CSAFPID-5138589" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-beta.3", "product": { "name": "vers:unknown/v6.0.0-beta.3", "product_id": "CSAFPID-5138590" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-beta.5", "product": { "name": "vers:unknown/v6.0.0-beta.5", "product_id": "CSAFPID-5138591" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-beta.6", "product": { "name": "vers:unknown/v6.0.0-beta.6", "product_id": "CSAFPID-5138592" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-beta.7", "product": { "name": "vers:unknown/v6.0.0-beta.7", "product_id": "CSAFPID-5138593" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-beta.8", "product": { "name": "vers:unknown/v6.0.0-beta.8", "product_id": "CSAFPID-5138594" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-beta.9", "product": { "name": "vers:unknown/v6.0.0-beta.9", "product_id": "CSAFPID-5138595" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.0", "product": { "name": "vers:unknown/v6.0.0-rc.0", "product_id": "CSAFPID-5138596" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.1", "product": { "name": "vers:unknown/v6.0.0-rc.1", "product_id": "CSAFPID-5138597" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.10", "product": { "name": "vers:unknown/v6.0.0-rc.10", "product_id": "CSAFPID-5138598" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.2", "product": { "name": "vers:unknown/v6.0.0-rc.2", "product_id": "CSAFPID-5138599" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.3", "product": { "name": "vers:unknown/v6.0.0-rc.3", "product_id": "CSAFPID-5138600" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.4", "product": { "name": "vers:unknown/v6.0.0-rc.4", "product_id": "CSAFPID-5138601" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.5", "product": { "name": "vers:unknown/v6.0.0-rc.5", "product_id": "CSAFPID-5138602" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.6", "product": { "name": "vers:unknown/v6.0.0-rc.6", "product_id": "CSAFPID-5138603" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.7", "product": { "name": "vers:unknown/v6.0.0-rc.7", "product_id": "CSAFPID-5138604" } }, { "category": "product_version_range", "name": "vers:unknown/v6.0.0-rc.9", "product": { "name": "vers:unknown/v6.0.0-rc.9", "product_id": "CSAFPID-5138605" } }, { "category": "product_version_range", "name": "vers:unknown/v6.2.0-beta.0", "product": { "name": "vers:unknown/v6.2.0-beta.0", "product_id": "CSAFPID-5138606" } }, { "category": "product_version_range", "name": "vers:unknown/v6.2.0-beta.1", "product": { "name": "vers:unknown/v6.2.0-beta.1", "product_id": "CSAFPID-5138607" } }, { "category": "product_version_range", "name": "vers:unknown/v6.2.0-beta.2", "product": { "name": "vers:unknown/v6.2.0-beta.2", "product_id": "CSAFPID-5138608" } }, { "category": "product_version_range", "name": "vers:unknown/v6.2.0-beta.3", "product": { "name": "vers:unknown/v6.2.0-beta.3", "product_id": "CSAFPID-5138609" } }, { "category": "product_version_range", "name": "vers:unknown/v6.2.0-rc.0", "product": { "name": "vers:unknown/v6.2.0-rc.0", "product_id": "CSAFPID-5138610" } }, { "category": "product_version_range", "name": "vers:unknown/v7.0.0-beta.2", "product": { "name": "vers:unknown/v7.0.0-beta.2", "product_id": "CSAFPID-5138611" } }, { "category": "product_version_range", "name": "vers:unknown/v7.0.0-beta.3", "product": { "name": "vers:unknown/v7.0.0-beta.3", "product_id": "CSAFPID-5138612" } }, { "category": "product_version_range", "name": "vers:unknown/v7.0.0-beta.4", "product": { "name": "vers:unknown/v7.0.0-beta.4", "product_id": "CSAFPID-5138613" } }, { "category": "product_version_range", "name": "vers:unknown/v7.0.0-rc.0", "product": { "name": "vers:unknown/v7.0.0-rc.0", "product_id": "CSAFPID-5138614" } }, { "category": "product_version_range", "name": "vers:unknown/v7.0.0-rc.2", "product": { "name": "vers:unknown/v7.0.0-rc.2", "product_id": "CSAFPID-5138615" } }, { "category": "product_version_range", "name": "vers:unknown/v7.0.0-rc.3", "product": { "name": "vers:unknown/v7.0.0-rc.3", "product_id": "CSAFPID-5138616" } }, { "category": "product_version_range", "name": "vers:unknown/v7.1.0-beta.0", "product": { "name": "vers:unknown/v7.1.0-beta.0", "product_id": "CSAFPID-5138617" } }, { "category": "product_version_range", "name": "vers:unknown/v7.1.0-beta.1", "product": { "name": "vers:unknown/v7.1.0-beta.1", "product_id": "CSAFPID-5138618" } }, { "category": "product_version_range", "name": "vers:unknown/v7.1.0-rc.0", "product": { "name": "vers:unknown/v7.1.0-rc.0", "product_id": "CSAFPID-5138619" } }, { "category": "product_version_range", "name": "vers:unknown/v7.2.0-beta.0", "product": { "name": "vers:unknown/v7.2.0-beta.0", "product_id": "CSAFPID-5138620" } }, { "category": "product_version_range", "name": "vers:unknown/v7.2.0-beta.1", "product": { "name": "vers:unknown/v7.2.0-beta.1", "product_id": "CSAFPID-5138621" } }, { "category": "product_version_range", "name": "vers:unknown/v7.2.0-beta.2", "product": { "name": "vers:unknown/v7.2.0-beta.2", "product_id": "CSAFPID-5138622" } }, { "category": "product_version_range", "name": "vers:unknown/v7.2.0-rc.0", "product": { "name": "vers:unknown/v7.2.0-rc.0", "product_id": "CSAFPID-5138623" } }, { "category": "product_version_range", "name": "vers:unknown/v7.3.0-beta.0", "product": { "name": "vers:unknown/v7.3.0-beta.0", "product_id": "CSAFPID-5138624" } }, { "category": "product_version_range", "name": "vers:unknown/v7.3.0-rc.0", "product": { "name": "vers:unknown/v7.3.0-rc.0", "product_id": "CSAFPID-5138625" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.0", "product": { "name": "vers:unknown/v8.0.0-beta.0", "product_id": "CSAFPID-5138626" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.1", "product": { "name": "vers:unknown/v8.0.0-beta.1", "product_id": "CSAFPID-5138627" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.10", "product": { "name": "vers:unknown/v8.0.0-beta.10", "product_id": "CSAFPID-5138628" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.11", "product": { "name": "vers:unknown/v8.0.0-beta.11", "product_id": "CSAFPID-5138629" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.12", "product": { "name": "vers:unknown/v8.0.0-beta.12", "product_id": "CSAFPID-5138630" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.13", "product": { "name": "vers:unknown/v8.0.0-beta.13", "product_id": "CSAFPID-5138631" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.14", "product": { "name": "vers:unknown/v8.0.0-beta.14", "product_id": "CSAFPID-5138632" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.15", "product": { "name": "vers:unknown/v8.0.0-beta.15", "product_id": "CSAFPID-5138633" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.16", "product": { "name": "vers:unknown/v8.0.0-beta.16", "product_id": "CSAFPID-5138634" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.17", "product": { "name": "vers:unknown/v8.0.0-beta.17", "product_id": "CSAFPID-5138635" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.18", "product": { "name": "vers:unknown/v8.0.0-beta.18", "product_id": "CSAFPID-5138636" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.2", "product": { "name": "vers:unknown/v8.0.0-beta.2", "product_id": "CSAFPID-5138637" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.3", "product": { "name": "vers:unknown/v8.0.0-beta.3", "product_id": "CSAFPID-5138638" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.4", "product": { "name": "vers:unknown/v8.0.0-beta.4", "product_id": "CSAFPID-5138639" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.5", "product": { "name": "vers:unknown/v8.0.0-beta.5", "product_id": "CSAFPID-5138640" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.6", "product": { "name": "vers:unknown/v8.0.0-beta.6", "product_id": "CSAFPID-5138641" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.7", "product": { "name": "vers:unknown/v8.0.0-beta.7", "product_id": "CSAFPID-5138642" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.8", "product": { "name": "vers:unknown/v8.0.0-beta.8", "product_id": "CSAFPID-5138643" } }, { "category": "product_version_range", "name": "vers:unknown/v8.0.0-beta.9", "product": { "name": "vers:unknown/v8.0.0-beta.9", "product_id": "CSAFPID-5138644" } }, { "category": "product_version_range", "name": "vers:unknown/v8.1.0", "product": { "name": "vers:unknown/v8.1.0", "product_id": "CSAFPID-5138645" } }, { "category": "product_version_range", "name": "vers:unknown/v8.1.0-beta.0", "product": { "name": "vers:unknown/v8.1.0-beta.0", "product_id": "CSAFPID-5138646" } }, { "category": "product_version_range", "name": "vers:unknown/v8.1.0-beta.1", "product": { "name": "vers:unknown/v8.1.0-beta.1", "product_id": "CSAFPID-5138647" } }, { "category": "product_version_range", "name": "vers:unknown/v8.1.0-beta.2", "product": { "name": "vers:unknown/v8.1.0-beta.2", "product_id": "CSAFPID-5138648" } }, { "category": "product_version_range", "name": "vers:unknown/v8.1.0-beta.3", "product": { "name": "vers:unknown/v8.1.0-beta.3", "product_id": "CSAFPID-5138649" } }, { "category": "product_version_range", "name": "vers:unknown/v8.1.0-rc.0", "product": { "name": "vers:unknown/v8.1.0-rc.0", "product_id": "CSAFPID-5138650" } }, { "category": "product_version_range", "name": "vers:unknown/v8.2.0-next.0", "product": { "name": "vers:unknown/v8.2.0-next.0", "product_id": "CSAFPID-5138651" } }, { "category": "product_version_range", "name": "vers:unknown/v8.2.0-next.1", "product": { "name": "vers:unknown/v8.2.0-next.1", "product_id": "CSAFPID-5138652" } }, { "category": "product_version_range", "name": "vers:unknown/v8.2.0-next.2", "product": { "name": "vers:unknown/v8.2.0-next.2", "product_id": "CSAFPID-5138653" } }, { "category": "product_version_range", "name": "vers:unknown/v8.2.0-rc.0", "product": { "name": "vers:unknown/v8.2.0-rc.0", "product_id": "CSAFPID-5138654" } }, { "category": "product_version_range", "name": "vers:unknown/v8.3.0-next.0", "product": { "name": "vers:unknown/v8.3.0-next.0", "product_id": "CSAFPID-5138655" } }, { "category": "product_version_range", "name": "vers:unknown/v8.3.0-next.1", "product": { "name": "vers:unknown/v8.3.0-next.1", "product_id": "CSAFPID-5138656" } }, { "category": "product_version_range", "name": "vers:unknown/v8.3.0-next.2", "product": { "name": "vers:unknown/v8.3.0-next.2", "product_id": "CSAFPID-5138657" } }, { "category": "product_version_range", "name": "vers:unknown/v8.3.0-rc.0", "product": { "name": "vers:unknown/v8.3.0-rc.0", "product_id": "CSAFPID-5138658" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.0", "product": { "name": "vers:unknown/v9.0.0-next.0", "product_id": "CSAFPID-5138659" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.1", "product": { "name": "vers:unknown/v9.0.0-next.1", "product_id": "CSAFPID-5138660" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.10", "product": { "name": "vers:unknown/v9.0.0-next.10", "product_id": "CSAFPID-5138661" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.11", "product": { "name": "vers:unknown/v9.0.0-next.11", "product_id": "CSAFPID-5138662" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.12", "product": { "name": "vers:unknown/v9.0.0-next.12", "product_id": "CSAFPID-5138663" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.13", "product": { "name": "vers:unknown/v9.0.0-next.13", "product_id": "CSAFPID-5138664" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.14", "product": { "name": "vers:unknown/v9.0.0-next.14", "product_id": "CSAFPID-5138665" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.15", "product": { "name": "vers:unknown/v9.0.0-next.15", "product_id": "CSAFPID-5138666" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.16", "product": { "name": "vers:unknown/v9.0.0-next.16", "product_id": "CSAFPID-5138667" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.17", "product": { "name": "vers:unknown/v9.0.0-next.17", "product_id": "CSAFPID-5138668" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.18", "product": { "name": "vers:unknown/v9.0.0-next.18", "product_id": "CSAFPID-5138669" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.19", "product": { "name": "vers:unknown/v9.0.0-next.19", "product_id": "CSAFPID-5138670" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.2", "product": { "name": "vers:unknown/v9.0.0-next.2", "product_id": "CSAFPID-5138671" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.3", "product": { "name": "vers:unknown/v9.0.0-next.3", "product_id": "CSAFPID-5138672" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.4", "product": { "name": "vers:unknown/v9.0.0-next.4", "product_id": "CSAFPID-5138673" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.5", "product": { "name": "vers:unknown/v9.0.0-next.5", "product_id": "CSAFPID-5138674" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.6", "product": { "name": "vers:unknown/v9.0.0-next.6", "product_id": "CSAFPID-5138675" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.7", "product": { "name": "vers:unknown/v9.0.0-next.7", "product_id": "CSAFPID-5138676" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.8", "product": { "name": "vers:unknown/v9.0.0-next.8", "product_id": "CSAFPID-5138677" } }, { "category": "product_version_range", "name": "vers:unknown/v9.0.0-next.9", "product": { "name": "vers:unknown/v9.0.0-next.9", "product_id": "CSAFPID-5138678" } }, { "category": "product_version_range", "name": "vers:unknown/v9.1.0-next.0", "product": { "name": "vers:unknown/v9.1.0-next.0", "product_id": "CSAFPID-5138679" } }, { "category": "product_version_range", "name": "vers:unknown/v9.1.0-next.1", "product": { "name": "vers:unknown/v9.1.0-next.1", "product_id": "CSAFPID-5138680" } }, { "category": "product_version_range", "name": "vers:unknown/v9.1.0-next.2", "product": { "name": "vers:unknown/v9.1.0-next.2", "product_id": "CSAFPID-5138681" } }, { "category": "product_version_range", "name": "vers:unknown/v9.1.0-next.3", "product": { "name": "vers:unknown/v9.1.0-next.3", "product_id": "CSAFPID-5138682" } }, { "category": "product_version_range", "name": "vers:unknown/v9.1.0-next.4", "product": { "name": "vers:unknown/v9.1.0-next.4", "product_id": "CSAFPID-5138683" } } ], "category": "product_name", "name": "angular-cli" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/19.2.21", "product": { "name": "vers:unknown/19.2.21", "product_id": "CSAFPID-5944650" } }, { "category": "product_version_range", "name": "vers:unknown/20.3.17", "product": { "name": "vers:unknown/20.3.17", "product_id": "CSAFPID-5944649" } }, { "category": "product_version_range", "name": "vers:unknown/21.1.5", "product": { "name": "vers:unknown/21.1.5", "product_id": "CSAFPID-5944648" } }, { "category": "product_version_range", "name": "vers:unknown/21.2.0-rc.1", "product": { "name": "vers:unknown/21.2.0-rc.1", "product_id": "CSAFPID-5944647" } }, { "category": "product_version_range", "name": "vers:unknown/<19.2.21", "product": { "name": "vers:unknown/<19.2.21", "product_id": "CSAFPID-5944655" } }, { "category": "product_version_range", "name": "vers:unknown/>=20.0.0-next.0|<20.3.17", "product": { "name": "vers:unknown/>=20.0.0-next.0|<20.3.17", "product_id": "CSAFPID-5944653" } }, { "category": "product_version_range", "name": "vers:unknown/>=21.0.0-next.0|<21.1.5", "product": { "name": "vers:unknown/>=21.0.0-next.0|<21.1.5", "product_id": "CSAFPID-5944652" } }, { "category": "product_version_range", "name": "vers:unknown/>=21.2.0-next.0|<21.2.0-rc.1", "product": { "name": "vers:unknown/>=21.2.0-next.0|<21.2.0-rc.1", "product_id": "CSAFPID-5944651" } } ], "category": "product_name", "name": "npm/@angular/ssr" } ], "category": "vendor", "name": "angular" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/ssr <19.2.21", "product": { "name": "vers:unknown/ssr <19.2.21", "product_id": "CSAFPID-5729799" } }, { "category": "product_version_range", "name": "vers:unknown/ssr <20.3.17", "product": { "name": "vers:unknown/ssr <20.3.17", "product_id": "CSAFPID-5729801" } }, { "category": "product_version_range", "name": "vers:unknown/ssr <21.1.5", "product": { "name": "vers:unknown/ssr <21.1.5", "product_id": "CSAFPID-5729802" } }, { "category": "product_version_range", "name": "vers:unknown/ssr <21.2.0-rc.1", "product": { "name": "vers:unknown/ssr <21.2.0-rc.1", "product_id": "CSAFPID-5729800" } } ], "category": "product_name", "name": "Angular" } ], "category": "vendor", "name": "Open Source" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27739", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "description", "text": "The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain. Specifically, the framework didn't have checks for the host domain, path and character sanitization, and port validation. This vulnerability manifests in two primary ways: implicit relative URL resolution and explicit manual construction. When successfully exploited, this vulnerability allows for arbitrary internal request steering. This can lead to credential exfiltration, internal network probing, and a confidentiality breach. In order to be vulnerable, the victim application must use Angular SSR (Server-Side Rendering), the application must perform `HttpClient` requests using relative URLs OR manually construct URLs using the unvalidated `Host` / `X-Forwarded-*` headers using the `REQUEST` object, the application server must be reachable by an attacker who can influence these headers without strict validation from a front-facing proxy, and the infrastructure (Cloud, CDN, or Load Balancer) must not sanitize or validate incoming headers. Versions 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 contain a patch. Some workarounds are available. Avoid using `req.headers` for URL construction. Instead, use trusted variables for base API paths. Those who cannot upgrade immediately should implement a middleware in their `server.ts` to enforce numeric ports and validated hostnames.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27739" }, { "category": "description", "text": "The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain. Specifically, the framework didn't have checks for the host domain, path and character sanitization, and port validation. This vulnerability manifests in two primary ways: implicit relative URL resolution and explicit manual construction. When successfully exploited, this vulnerability allows for arbitrary internal request steering. This can lead to credential exfiltration, internal network probing, and a confidentiality breach. In order to be vulnerable, the victim application must use Angular SSR (Server-Side Rendering), the application must perform `HttpClient` requests using relative URLs OR manually construct URLs using the unvalidated `Host` / `X-Forwarded-*` headers using the `REQUEST` object, the application server must be reachable by an attacker who can influence these headers without strict validation from a front-facing proxy, and the infrastructure (Cloud, CDN, or Load Balancer) must not sanitize or validate incoming headers. Versions 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 contain a patch. Some workarounds are available. Avoid using `req.headers` for URL construction. Instead, use trusted variables for base API paths. Those who cannot upgrade immediately should implement a middleware in their `server.ts` to enforce numeric ports and validated hostnames.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27739" }, { "category": "description", "text": "A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability has been identified in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain.\n\nSpecifically, the framework didn't have checks for the following:\n- **Host Domain**: The `Host` and `X-Forwarded-Host` headers were not checked to belong to a trusted origin. This allows an attacker to redefine the \"base\" of the application to an arbitrary external domain.\n- **Path & Character Sanitization**: The `X-Forwarded-Host` header was not checked for path segments or special characters, allowing manipulation of the base path for all resolved relative URLs.\n- **Port Validation**: The `X-Forwarded-Port` header was not verified as numeric, leading to malformed URI construction or injection attacks.\n\n\nThis vulnerability manifests in two primary ways:\n\n- **Implicit Relative URL Resolution**: Angular's `HttpClient` resolves relative URLs against this unvalidated and potentially malformed base origin. An attacker can \"steer\" these requests to an external server or internal service.\n- **Explicit Manual Construction**: Developers injecting the `REQUEST` object to manually construct URLs (for fetch or third-party SDKs) directly inherit these unsanitized values. By accessing the `Host` / `X-Forwarded-*` headers, the application logic may perform requests to attacker-controlled destinations or malformed endpoints.\n\n### Impact\n\nWhen successfully exploited, this vulnerability allows for arbitrary internal request steering. This can lead to:\n- **Credential Exfiltration**: Stealing sensitive `Authorization` headers or session cookies by redirecting them to an attacker's server.\n- **Internal Network Probing**: Accessing and transmitting data from internal services, databases, or cloud metadata endpoints (e.g., `169.254.169.254`) not exposed to the public internet.\n- Confidentiality Breach: Accessing sensitive information processed within the application's server-side context.\n\n### Attack Preconditions\n\n- The victim application must use Angular SSR (Server-Side Rendering).\n- The application must perform `HttpClient` requests using relative URLs OR manually construct URLs using the unvalidated `Host` / `X-Forwarded-*` headers using the `REQUEST` object.\n- **Direct Header Access**: The application server is reachable by an attacker who can influence these headers without strict validation from a front-facing proxy.\n- **Lack of Upstream Validation**: The infrastructure (Cloud, CDN, or Load Balancer) does not sanitize or validate incoming headers.\n\n### Patches\n\n- 21.2.0-rc.1\n- 21.1.5\n- 20.3.17\n- 19.2.21\n\n\n### Workarounds\n- **Use Absolute URLs:** Avoid using `req.headers` for URL construction. Instead, use trusted variables for your base API paths.\n- **Implement Strict Header Validation (Middleware)**: If you cannot upgrade immediately, implement a middleware in your `server.ts` to enforce numeric ports and validated hostnames.\n\n```ts\nconst ALLOWED_HOSTS = new Set(['your-domain.com']);\n\napp.use((req, res, next) => {\n const hostHeader = (req.headers['x-forwarded-host'] ?? req.headers['host'])?.toString();\n const portHeader = req.headers['x-forwarded-port']?.toString();\n\n if (hostHeader) {\n const hostname = hostHeader.split(':')[0];\n // Reject if hostname contains path separators or is not in allowlist\n if (/^[a-z0-9.:-]+$/i.test(hostname) || \n (!ALLOWED_HOSTS.has(hostname) && hostname !== 'localhost')) {\n return res.status(400).send('Invalid Hostname');\n }\n }\n\n // Ensure port is strictly numeric if provided\n if (portHeader && !/^\\d+$/.test(portHeader)) {\n return res.status(400).send('Invalid Port');\n }\n\n next();\n});\n```\n\n### References\n\n- [Fix](https://github.com/angular/angular-cli/pull/32516)\n- [Docs](https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf)", "title": "github - https://github.com/advisories/GHSA-x288-3778-4hhx" }, { "category": "description", "text": "A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability has been identified in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain.\n\nSpecifically, the framework didn't have checks for the following:\n- **Host Domain**: The `Host` and `X-Forwarded-Host` headers were not checked to belong to a trusted origin. This allows an attacker to redefine the \"base\" of the application to an arbitrary external domain.\n- **Path & Character Sanitization**: The `X-Forwarded-Host` header was not checked for path segments or special characters, allowing manipulation of the base path for all resolved relative URLs.\n- **Port Validation**: The `X-Forwarded-Port` header was not verified as numeric, leading to malformed URI construction or injection attacks.\n\n\nThis vulnerability manifests in two primary ways:\n\n- **Implicit Relative URL Resolution**: Angular's `HttpClient` resolves relative URLs against this unvalidated and potentially malformed base origin. An attacker can \"steer\" these requests to an external server or internal service.\n- **Explicit Manual Construction**: Developers injecting the `REQUEST` object to manually construct URLs (for fetch or third-party SDKs) directly inherit these unsanitized values. By accessing the `Host` / `X-Forwarded-*` headers, the application logic may perform requests to attacker-controlled destinations or malformed endpoints.\n\n### Impact\n\nWhen successfully exploited, this vulnerability allows for arbitrary internal request steering. This can lead to:\n- **Credential Exfiltration**: Stealing sensitive `Authorization` headers or session cookies by redirecting them to an attacker's server.\n- **Internal Network Probing**: Accessing and transmitting data from internal services, databases, or cloud metadata endpoints (e.g., `169.254.169.254`) not exposed to the public internet.\n- Confidentiality Breach: Accessing sensitive information processed within the application's server-side context.\n\n### Attack Preconditions\n\n- The victim application must use Angular SSR (Server-Side Rendering).\n- The application must perform `HttpClient` requests using relative URLs OR manually construct URLs using the unvalidated `Host` / `X-Forwarded-*` headers using the `REQUEST` object.\n- **Direct Header Access**: The application server is reachable by an attacker who can influence these headers without strict validation from a front-facing proxy.\n- **Lack of Upstream Validation**: The infrastructure (Cloud, CDN, or Load Balancer) does not sanitize or validate incoming headers.\n\n### Patches\n\n- 21.2.0-rc.1\n- 21.1.5\n- 20.3.17\n- 19.2.21\n\n\n### Workarounds\n- **Use Absolute URLs:** Avoid using `req.headers` for URL construction. Instead, use trusted variables for your base API paths.\n- **Implement Strict Header Validation (Middleware)**: If you cannot upgrade immediately, implement a middleware in your `server.ts` to enforce numeric ports and validated hostnames.\n\n```ts\nconst ALLOWED_HOSTS = new Set(['your-domain.com']);\n\napp.use((req, res, next) => {\n const hostHeader = (req.headers['x-forwarded-host'] ?? req.headers['host'])?.toString();\n const portHeader = req.headers['x-forwarded-port']?.toString();\n\n if (hostHeader) {\n const hostname = hostHeader.split(':')[0];\n // Reject if hostname contains path separators or is not in allowlist\n if (/^[a-z0-9.:-]+$/i.test(hostname) || \n (!ALLOWED_HOSTS.has(hostname) && hostname !== 'localhost')) {\n return res.status(400).send('Invalid Hostname');\n }\n }\n\n // Ensure port is strictly numeric if provided\n if (portHeader && !/^\\d+$/.test(portHeader)) {\n return res.status(400).send('Invalid Port');\n }\n\n next();\n});\n```\n\n### References\n\n- [Fix](https://github.com/angular/angular-cli/pull/32516)\n- [Docs](https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf)", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-x288-3778-4hhx.json?alt=media" }, { "category": "description", "text": "The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain. Specifically, the framework didn't have checks for the host domain, path and character sanitization, and port validation. This vulnerability manifests in two primary ways: implicit relative URL resolution and explicit manual construction. When successfully exploited, this vulnerability allows for arbitrary internal request steering. This can lead to credential exfiltration, internal network probing, and a confidentiality breach. In order to be vulnerable, the victim application must use Angular SSR (Server-Side Rendering), the application must perform `HttpClient` requests using relative URLs OR manually construct URLs using the unvalidated `Host` / `X-Forwarded-*` headers using the `REQUEST` object, the application server must be reachable by an attacker who can influence these headers without strict validation from a front-facing proxy, and the infrastructure (Cloud, CDN, or Load Balancer) must not sanitize or validate incoming headers. Versions 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 contain a patch. Some workarounds are available. Avoid using `req.headers` for URL construction. Instead, use trusted variables for base API paths. Those who cannot upgrade immediately should implement a middleware in their `server.ts` to enforce numeric ports and validated hostnames.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27739.json?alt=media" }, { "category": "description", "text": "A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability has been identified in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain.\n\nSpecifically, the framework didn't have checks for the following:\n- **Host Domain**: The `Host` and `X-Forwarded-Host` headers were not checked to belong to a trusted origin. This allows an attacker to redefine the \"base\" of the application to an arbitrary external domain.\n- **Path & Character Sanitization**: The `X-Forwarded-Host` header was not checked for path segments or special characters, allowing manipulation of the base path for all resolved relative URLs.\n- **Port Validation**: The `X-Forwarded-Port` header was not verified as numeric, leading to malformed URI construction or injection attacks.\n\n\nThis vulnerability manifests in two primary ways:\n\n- **Implicit Relative URL Resolution**: Angular's `HttpClient` resolves relative URLs against this unvalidated and potentially malformed base origin. An attacker can \"steer\" these requests to an external server or internal service.\n- **Explicit Manual Construction**: Developers injecting the `REQUEST` object to manually construct URLs (for fetch or third-party SDKs) directly inherit these unsanitized values. By accessing the `Host` / `X-Forwarded-*` headers, the application logic may perform requests to attacker-controlled destinations or malformed endpoints.", "title": "gitlab - https://gitlab.com/api/v4/projects/25847700/repository/files/npm%2F@angular%2Fssr%2FCVE-2026-27739.yml/raw" }, { "category": "other", "text": "0.00054", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N", "title": "CVSSV4" }, { "category": "other", "text": "9.2", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.3", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to a product by vendor Open Source, There is cwe data available from source Nvd, There is cwe data available from source Github, Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" } ], "product_status": { "fixed": [ "CSAFPID-5944647", "CSAFPID-5944648", "CSAFPID-5944649", "CSAFPID-5944650" ], "known_affected": [ "CSAFPID-5706531", "CSAFPID-5706532", "CSAFPID-5706533", "CSAFPID-5706534", "CSAFPID-5706535", "CSAFPID-5706536", "CSAFPID-5721017", "CSAFPID-5721018", "CSAFPID-5721019", "CSAFPID-5721021", "CSAFPID-5721022", "CSAFPID-5721023", "CSAFPID-5104829", "CSAFPID-5104830", "CSAFPID-5104831", "CSAFPID-5104832", "CSAFPID-5104833", "CSAFPID-5104834", "CSAFPID-5104835", "CSAFPID-5104836", "CSAFPID-5104837", "CSAFPID-5104838", "CSAFPID-5104839", "CSAFPID-5104840", "CSAFPID-5104841", "CSAFPID-5104842", "CSAFPID-5104843", "CSAFPID-5104844", "CSAFPID-5104845", "CSAFPID-5104846", "CSAFPID-5104847", "CSAFPID-5104848", "CSAFPID-5104849", "CSAFPID-5104850", "CSAFPID-5104851", "CSAFPID-5104852", "CSAFPID-5104853", "CSAFPID-5104854", "CSAFPID-5104855", "CSAFPID-5104856", "CSAFPID-5104857", "CSAFPID-5104858", "CSAFPID-5104859", "CSAFPID-5104860", "CSAFPID-5104861", "CSAFPID-5104862", "CSAFPID-5104863", "CSAFPID-5104864", "CSAFPID-5104865", "CSAFPID-5138387", "CSAFPID-5138388", "CSAFPID-5138389", "CSAFPID-5138390", "CSAFPID-5138391", "CSAFPID-5138392", "CSAFPID-5138393", "CSAFPID-5138394", "CSAFPID-5138395", "CSAFPID-5138396", "CSAFPID-5138397", "CSAFPID-5138398", "CSAFPID-5138399", "CSAFPID-5138400", "CSAFPID-5138401", "CSAFPID-5138402", "CSAFPID-5138403", "CSAFPID-5138404", "CSAFPID-5138405", "CSAFPID-5138406", "CSAFPID-5138407", "CSAFPID-5138408", "CSAFPID-5138409", "CSAFPID-5138410", "CSAFPID-5138411", "CSAFPID-5138412", "CSAFPID-5138413", "CSAFPID-5138414", "CSAFPID-5138415", "CSAFPID-5138416", "CSAFPID-5138417", "CSAFPID-5138418", "CSAFPID-5138419", "CSAFPID-5138420", "CSAFPID-5138421", "CSAFPID-5138422", "CSAFPID-5138423", "CSAFPID-5138424", "CSAFPID-5138425", "CSAFPID-5138426", "CSAFPID-5138427", "CSAFPID-5138428", "CSAFPID-5138429", "CSAFPID-5138430", "CSAFPID-5138431", "CSAFPID-5138432", "CSAFPID-5138433", "CSAFPID-5138434", "CSAFPID-5138435", "CSAFPID-5138436", "CSAFPID-5138437", "CSAFPID-5138438", "CSAFPID-5138439", "CSAFPID-5138440", "CSAFPID-5138441", "CSAFPID-5138442", "CSAFPID-5138443", "CSAFPID-5138444", "CSAFPID-5138445", "CSAFPID-5138446", "CSAFPID-5138447", "CSAFPID-5138448", "CSAFPID-5138449", "CSAFPID-5138450", "CSAFPID-5138451", "CSAFPID-5138452", "CSAFPID-5138453", "CSAFPID-5138454", "CSAFPID-5138455", "CSAFPID-5138456", "CSAFPID-5138457", "CSAFPID-5138458", "CSAFPID-5138459", "CSAFPID-5138460", "CSAFPID-5138461", "CSAFPID-5138462", "CSAFPID-5138463", "CSAFPID-5138464", "CSAFPID-5138465", "CSAFPID-5138466", "CSAFPID-5138467", "CSAFPID-5138496", "CSAFPID-5138497", "CSAFPID-5138498", "CSAFPID-5138499", "CSAFPID-5138500", "CSAFPID-5138501", "CSAFPID-5138502", "CSAFPID-5138503", "CSAFPID-5138504", "CSAFPID-5138505", "CSAFPID-5138506", "CSAFPID-5138507", "CSAFPID-5138508", "CSAFPID-5138509", "CSAFPID-5138510", "CSAFPID-5138511", "CSAFPID-5138512", "CSAFPID-5138513", "CSAFPID-5138514", "CSAFPID-5138515", "CSAFPID-5138516", "CSAFPID-5138517", "CSAFPID-5138518", "CSAFPID-5138519", "CSAFPID-5138520", "CSAFPID-5138521", "CSAFPID-5138522", "CSAFPID-5138523", "CSAFPID-5138524", "CSAFPID-5138525", "CSAFPID-5138526", "CSAFPID-5138527", "CSAFPID-5138528", "CSAFPID-5138529", "CSAFPID-5138530", "CSAFPID-5138531", "CSAFPID-5138532", "CSAFPID-5138533", "CSAFPID-5138534", "CSAFPID-5138535", "CSAFPID-5138536", "CSAFPID-5138537", "CSAFPID-5138538", "CSAFPID-5138539", "CSAFPID-5138540", "CSAFPID-5138541", "CSAFPID-5138542", "CSAFPID-5138543", "CSAFPID-5138544", "CSAFPID-5138545", "CSAFPID-5138546", "CSAFPID-5138547", "CSAFPID-5138548", "CSAFPID-5138549", "CSAFPID-5138550", "CSAFPID-5138551", "CSAFPID-5138552", "CSAFPID-5138553", "CSAFPID-5138554", "CSAFPID-5138555", "CSAFPID-5138556", "CSAFPID-5138557", "CSAFPID-5138558", "CSAFPID-5138559", "CSAFPID-5138560", "CSAFPID-5138561", "CSAFPID-5138562", "CSAFPID-5138563", "CSAFPID-5138564", "CSAFPID-5138565", "CSAFPID-5138566", "CSAFPID-5138567", "CSAFPID-5138568", "CSAFPID-5138569", "CSAFPID-5138570", "CSAFPID-5138571", "CSAFPID-5138572", "CSAFPID-5138573", "CSAFPID-5138574", "CSAFPID-5138575", "CSAFPID-5138576", "CSAFPID-5138577", "CSAFPID-5138578", "CSAFPID-5138579", "CSAFPID-5138580", "CSAFPID-5138581", "CSAFPID-5138582", "CSAFPID-5138583", "CSAFPID-5138584", "CSAFPID-5138585", "CSAFPID-5138586", "CSAFPID-5138587", "CSAFPID-5138588", "CSAFPID-5138589", "CSAFPID-5138590", "CSAFPID-5138591", "CSAFPID-5138592", "CSAFPID-5138593", "CSAFPID-5138594", "CSAFPID-5138595", "CSAFPID-5138596", "CSAFPID-5138597", "CSAFPID-5138598", "CSAFPID-5138599", "CSAFPID-5138600", "CSAFPID-5138601", "CSAFPID-5138602", "CSAFPID-5138603", "CSAFPID-5138604", "CSAFPID-5138605", "CSAFPID-5138606", "CSAFPID-5138607", "CSAFPID-5138608", "CSAFPID-5138609", "CSAFPID-5138610", "CSAFPID-5138611", "CSAFPID-5138612", "CSAFPID-5138613", "CSAFPID-5138614", "CSAFPID-5138615", "CSAFPID-5138616", "CSAFPID-5138617", "CSAFPID-5138618", "CSAFPID-5138619", "CSAFPID-5138620", "CSAFPID-5138621", "CSAFPID-5138622", "CSAFPID-5138623", "CSAFPID-5138624", "CSAFPID-5138625", "CSAFPID-5138626", "CSAFPID-5138627", "CSAFPID-5138628", "CSAFPID-5138629", "CSAFPID-5138630", "CSAFPID-5138631", "CSAFPID-5138632", "CSAFPID-5138633", "CSAFPID-5138634", "CSAFPID-5138635", "CSAFPID-5138636", "CSAFPID-5138637", "CSAFPID-5138638", "CSAFPID-5138639", "CSAFPID-5138640", "CSAFPID-5138641", "CSAFPID-5138642", "CSAFPID-5138643", "CSAFPID-5138644", "CSAFPID-5138645", "CSAFPID-5138646", "CSAFPID-5138647", "CSAFPID-5138648", "CSAFPID-5138649", "CSAFPID-5138650", "CSAFPID-5138651", "CSAFPID-5138652", "CSAFPID-5138653", "CSAFPID-5138654", "CSAFPID-5138655", "CSAFPID-5138656", "CSAFPID-5138657", "CSAFPID-5138658", "CSAFPID-5138659", "CSAFPID-5138660", "CSAFPID-5138661", "CSAFPID-5138662", "CSAFPID-5138663", "CSAFPID-5138664", "CSAFPID-5138665", "CSAFPID-5138666", "CSAFPID-5138667", "CSAFPID-5138668", "CSAFPID-5138669", "CSAFPID-5138670", "CSAFPID-5138671", "CSAFPID-5138672", "CSAFPID-5138673", "CSAFPID-5138674", "CSAFPID-5138675", "CSAFPID-5138676", "CSAFPID-5138677", "CSAFPID-5138678", "CSAFPID-5138679", "CSAFPID-5138680", "CSAFPID-5138681", "CSAFPID-5138682", "CSAFPID-5138683", "CSAFPID-5723332", "CSAFPID-5723333", "CSAFPID-5723334", "CSAFPID-5723335", "CSAFPID-5723336", "CSAFPID-5723337", "CSAFPID-5723338", "CSAFPID-5723339", "CSAFPID-5723340", "CSAFPID-5723341", "CSAFPID-5723342", "CSAFPID-5723343", "CSAFPID-5723344", "CSAFPID-5723345", "CSAFPID-5723346", "CSAFPID-5723347", "CSAFPID-5723348", "CSAFPID-5723349", "CSAFPID-5723350", "CSAFPID-5723351", "CSAFPID-5723352", "CSAFPID-5723353", "CSAFPID-5723354", "CSAFPID-5723355", "CSAFPID-5723356", "CSAFPID-5723357", "CSAFPID-5729799", "CSAFPID-5729800", "CSAFPID-5729801", "CSAFPID-5729802", "CSAFPID-5944651", "CSAFPID-5944652", "CSAFPID-5944653", "CSAFPID-5944655" ] }, "references": [ { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27739" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27739.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27739" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27739" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-x288-3778-4hhx" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-x288-3778-4hhx" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-x288-3778-4hhx.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27739.json?alt=media" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0534.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27739" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - gitlab", "url": "https://gitlab.com/api/v4/projects/25847700/repository/files/npm%2F@angular%2Fssr%2FCVE-2026-27739.yml/raw" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/angular/angular-cli/security/advisories/GHSA-x288-3778-4hhx" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/angular/angular-cli/pull/32516" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF" }, { "category": "external", "summary": "Reference - github; gitlab; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27739" }, { "category": "external", "summary": "Reference - github; gitlab", "url": "https://github.com/advisories/GHSA-x288-3778-4hhx" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27739.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0534.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0534" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/angular/angular-cli/security/advisories/GHSA-xh43-g2fq-wjrj" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv" }, { "category": "external", "summary": "Reference - gitlab", "url": "https://github.com/angular/angular-cli" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "baseScore": 9.3, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-5104829", "CSAFPID-5104830", "CSAFPID-5104831", "CSAFPID-5104832", "CSAFPID-5104833", "CSAFPID-5104834", "CSAFPID-5104835", "CSAFPID-5104836", "CSAFPID-5104837", "CSAFPID-5104838", "CSAFPID-5104839", "CSAFPID-5104840", "CSAFPID-5104841", "CSAFPID-5104842", "CSAFPID-5104843", "CSAFPID-5104844", "CSAFPID-5104845", "CSAFPID-5104846", "CSAFPID-5104847", "CSAFPID-5104848", "CSAFPID-5104849", "CSAFPID-5104850", "CSAFPID-5104851", "CSAFPID-5104852", "CSAFPID-5104853", "CSAFPID-5104854", "CSAFPID-5104855", "CSAFPID-5104856", "CSAFPID-5104857", "CSAFPID-5104858", "CSAFPID-5104859", "CSAFPID-5104860", "CSAFPID-5104861", "CSAFPID-5104862", "CSAFPID-5104863", "CSAFPID-5104864", "CSAFPID-5104865", "CSAFPID-5138387", "CSAFPID-5138388", "CSAFPID-5138389", "CSAFPID-5138390", "CSAFPID-5138391", "CSAFPID-5138392", "CSAFPID-5138393", "CSAFPID-5138394", "CSAFPID-5138395", "CSAFPID-5138396", "CSAFPID-5138397", "CSAFPID-5138398", "CSAFPID-5138399", "CSAFPID-5138400", "CSAFPID-5138401", "CSAFPID-5138402", "CSAFPID-5138403", "CSAFPID-5138404", "CSAFPID-5138405", "CSAFPID-5138406", "CSAFPID-5138407", "CSAFPID-5138408", "CSAFPID-5138409", "CSAFPID-5138410", "CSAFPID-5138411", "CSAFPID-5138412", "CSAFPID-5138413", "CSAFPID-5138414", "CSAFPID-5138415", "CSAFPID-5138416", "CSAFPID-5138417", "CSAFPID-5138418", "CSAFPID-5138419", "CSAFPID-5138420", "CSAFPID-5138421", "CSAFPID-5138422", "CSAFPID-5138423", "CSAFPID-5138424", "CSAFPID-5138425", "CSAFPID-5138426", "CSAFPID-5138427", "CSAFPID-5138428", "CSAFPID-5138429", "CSAFPID-5138430", "CSAFPID-5138431", "CSAFPID-5138432", "CSAFPID-5138433", "CSAFPID-5138434", "CSAFPID-5138435", "CSAFPID-5138436", "CSAFPID-5138437", "CSAFPID-5138438", "CSAFPID-5138439", "CSAFPID-5138440", "CSAFPID-5138441", "CSAFPID-5138442", "CSAFPID-5138443", "CSAFPID-5138444", "CSAFPID-5138445", "CSAFPID-5138446", "CSAFPID-5138447", "CSAFPID-5138448", "CSAFPID-5138449", "CSAFPID-5138450", "CSAFPID-5138451", "CSAFPID-5138452", "CSAFPID-5138453", "CSAFPID-5138454", "CSAFPID-5138455", "CSAFPID-5138456", "CSAFPID-5138457", "CSAFPID-5138458", "CSAFPID-5138459", "CSAFPID-5138460", "CSAFPID-5138461", "CSAFPID-5138462", "CSAFPID-5138463", "CSAFPID-5138464", "CSAFPID-5138465", "CSAFPID-5138466", "CSAFPID-5138467", "CSAFPID-5138496", "CSAFPID-5138497", "CSAFPID-5138498", "CSAFPID-5138499", "CSAFPID-5138500", "CSAFPID-5138501", "CSAFPID-5138502", "CSAFPID-5138503", "CSAFPID-5138504", "CSAFPID-5138505", "CSAFPID-5138506", "CSAFPID-5138507", "CSAFPID-5138508", "CSAFPID-5138509", "CSAFPID-5138510", "CSAFPID-5138511", "CSAFPID-5138512", "CSAFPID-5138513", "CSAFPID-5138514", "CSAFPID-5138515", "CSAFPID-5138516", "CSAFPID-5138517", "CSAFPID-5138518", "CSAFPID-5138519", "CSAFPID-5138520", "CSAFPID-5138521", "CSAFPID-5138522", "CSAFPID-5138523", "CSAFPID-5138524", "CSAFPID-5138525", "CSAFPID-5138526", "CSAFPID-5138527", "CSAFPID-5138528", "CSAFPID-5138529", "CSAFPID-5138530", "CSAFPID-5138531", "CSAFPID-5138532", "CSAFPID-5138533", "CSAFPID-5138534", "CSAFPID-5138535", "CSAFPID-5138536", "CSAFPID-5138537", "CSAFPID-5138538", "CSAFPID-5138539", "CSAFPID-5138540", "CSAFPID-5138541", "CSAFPID-5138542", "CSAFPID-5138543", "CSAFPID-5138544", "CSAFPID-5138545", "CSAFPID-5138546", "CSAFPID-5138547", "CSAFPID-5138548", "CSAFPID-5138549", "CSAFPID-5138550", "CSAFPID-5138551", "CSAFPID-5138552", "CSAFPID-5138553", "CSAFPID-5138554", "CSAFPID-5138555", "CSAFPID-5138556", "CSAFPID-5138557", "CSAFPID-5138558", "CSAFPID-5138559", "CSAFPID-5138560", "CSAFPID-5138561", "CSAFPID-5138562", "CSAFPID-5138563", "CSAFPID-5138564", "CSAFPID-5138565", "CSAFPID-5138566", "CSAFPID-5138567", "CSAFPID-5138568", "CSAFPID-5138569", "CSAFPID-5138570", "CSAFPID-5138571", "CSAFPID-5138572", "CSAFPID-5138573", "CSAFPID-5138574", "CSAFPID-5138575", "CSAFPID-5138576", "CSAFPID-5138577", "CSAFPID-5138578", "CSAFPID-5138579", "CSAFPID-5138580", "CSAFPID-5138581", "CSAFPID-5138582", "CSAFPID-5138583", "CSAFPID-5138584", "CSAFPID-5138585", "CSAFPID-5138586", "CSAFPID-5138587", "CSAFPID-5138588", "CSAFPID-5138589", "CSAFPID-5138590", "CSAFPID-5138591", "CSAFPID-5138592", "CSAFPID-5138593", "CSAFPID-5138594", "CSAFPID-5138595", "CSAFPID-5138596", "CSAFPID-5138597", "CSAFPID-5138598", "CSAFPID-5138599", "CSAFPID-5138600", "CSAFPID-5138601", "CSAFPID-5138602", "CSAFPID-5138603", "CSAFPID-5138604", "CSAFPID-5138605", "CSAFPID-5138606", "CSAFPID-5138607", "CSAFPID-5138608", "CSAFPID-5138609", "CSAFPID-5138610", "CSAFPID-5138611", "CSAFPID-5138612", "CSAFPID-5138613", "CSAFPID-5138614", "CSAFPID-5138615", "CSAFPID-5138616", "CSAFPID-5138617", "CSAFPID-5138618", "CSAFPID-5138619", "CSAFPID-5138620", "CSAFPID-5138621", "CSAFPID-5138622", "CSAFPID-5138623", "CSAFPID-5138624", "CSAFPID-5138625", "CSAFPID-5138626", "CSAFPID-5138627", "CSAFPID-5138628", "CSAFPID-5138629", "CSAFPID-5138630", "CSAFPID-5138631", "CSAFPID-5138632", "CSAFPID-5138633", "CSAFPID-5138634", "CSAFPID-5138635", "CSAFPID-5138636", "CSAFPID-5138637", "CSAFPID-5138638", "CSAFPID-5138639", "CSAFPID-5138640", "CSAFPID-5138641", "CSAFPID-5138642", "CSAFPID-5138643", "CSAFPID-5138644", "CSAFPID-5138645", "CSAFPID-5138646", "CSAFPID-5138647", "CSAFPID-5138648", "CSAFPID-5138649", "CSAFPID-5138650", "CSAFPID-5138651", "CSAFPID-5138652", "CSAFPID-5138653", "CSAFPID-5138654", "CSAFPID-5138655", "CSAFPID-5138656", "CSAFPID-5138657", "CSAFPID-5138658", "CSAFPID-5138659", "CSAFPID-5138660", "CSAFPID-5138661", "CSAFPID-5138662", "CSAFPID-5138663", "CSAFPID-5138664", "CSAFPID-5138665", "CSAFPID-5138666", "CSAFPID-5138667", "CSAFPID-5138668", "CSAFPID-5138669", "CSAFPID-5138670", "CSAFPID-5138671", "CSAFPID-5138672", "CSAFPID-5138673", "CSAFPID-5138674", "CSAFPID-5138675", "CSAFPID-5138676", "CSAFPID-5138677", "CSAFPID-5138678", "CSAFPID-5138679", "CSAFPID-5138680", "CSAFPID-5138681", "CSAFPID-5138682", "CSAFPID-5138683", "CSAFPID-5706531", "CSAFPID-5706532", "CSAFPID-5706533", "CSAFPID-5706534", "CSAFPID-5706535", "CSAFPID-5706536", "CSAFPID-5721017", "CSAFPID-5721018", "CSAFPID-5721019", "CSAFPID-5721021", "CSAFPID-5721022", "CSAFPID-5721023", "CSAFPID-5723332", "CSAFPID-5723333", "CSAFPID-5723334", "CSAFPID-5723335", "CSAFPID-5723336", "CSAFPID-5723337", "CSAFPID-5723338", "CSAFPID-5723339", "CSAFPID-5723340", "CSAFPID-5723341", "CSAFPID-5723342", "CSAFPID-5723343", "CSAFPID-5723344", "CSAFPID-5723345", "CSAFPID-5723346", "CSAFPID-5723347", "CSAFPID-5723348", "CSAFPID-5723349", "CSAFPID-5723350", "CSAFPID-5723351", "CSAFPID-5723352", "CSAFPID-5723353", "CSAFPID-5723354", "CSAFPID-5723355", "CSAFPID-5723356", "CSAFPID-5723357", "CSAFPID-5729799", "CSAFPID-5729800", "CSAFPID-5729801", "CSAFPID-5729802", "CSAFPID-5944651", "CSAFPID-5944652", "CSAFPID-5944653", "CSAFPID-5944655" ] } ], "title": "CVE-2026-27739" } ] }