Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Angular : Server-Side Request Forgery (SSRF) Vulnerability - CVE-2026-88056 - Vulnerability Database
Angular

Angular : Server-Side Request Forgery (SSRF) Vulnerability - CVE-2026-88056

Medium
Reference: CVE-2026-88056
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-88056
Title: Angular : Server-Side Request Forgery (SSRF) Vulnerability
Overview:

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30 21.2.22 and 22.1.4 Angular Server-Side Rendering in angular/platform-server processes user-controlled resource or request URLs through HttpClient after application code validates them with WHATWG URL parsing. The resolveUrl and parseUrl utilities called String.prototype.trim() which removed leading Unicode whitespace such as U00A0 or UFEFF af