Security Advisory: Addressing Recent Vulnerabilities in Angular

We’ve released security updates to address two SSR vulnerabilities that we were made aware of and have since submitted committed code changes to fix. The two patched vulnerabilities are: SSRF and Header Injection in Angular SSR Open Redirect via X-Forwarded-Prefix in Angular SSR We recommend all developers update their SSR applications to the latest patch version as soon as possible. If an app does not deploy SSR to production, there is no immediate need to update, however we generally recommend staying on the latest supported patch versions as much as possible.