Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@nguniversal/common

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical, 1 high
Weekly downloads
45.4K
Dependents
11
Registry
npm

Advisories 2

  • CVE-2026-27739Critical 9.2

    Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

    Affected: through 16.2.0.

  • Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage

    Affected: from 16.0.0-next.0, through 16.2.0.