{"id":169612291,"number":"21.2.0-next.1","published_at":"2026-01-28T20:50:58.024Z","licenses":"MIT","integrity":"sha512-s0sf/ghzTLlefs5NjInGQ81BuCCB6IIqjxMRyLf6Mtz72ykU9ymzuF0tnx5egpA4HmOhZz2mfKjMY5YIlVZPHw==","status":null,"download_url":"https://registry.npmjs.org/@angular/platform-server/-/platform-server-21.2.0-next.1.tgz","registry_url":"https://www.npmjs.com/package/@angular/platform-server/v/21.2.0-next.1","documentation_url":null,"install_command":"npm install @angular/platform-server@21.2.0-next.1","immutable":null,"metadata":{"deprecated":null,"_npmUser":{"name":"google-wombot","email":"node-team-npm+wombot@google.com"},"dist":{"shasum":"21e5557482a85d774c7df17534f9c429061c2597","tarball":"https://registry.npmjs.org/@angular/platform-server/-/platform-server-21.2.0-next.1.tgz","fileCount":14,"integrity":"sha512-s0sf/ghzTLlefs5NjInGQ81BuCCB6IIqjxMRyLf6Mtz72ykU9ymzuF0tnx5egpA4HmOhZz2mfKjMY5YIlVZPHw==","signatures":[{"sig":"MEUCIQC2WlE1dol5aHJYk8aBW8X0BvOon900UtE6PuT+KacXtAIgfIM6MsaKdBLk4RSWgtYaV051TA0Ok5U3oNCHtDncj5I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":2889444},"gitHead":"c36017afed11160a94bbf3d99d289808172f7a47","main":null,"scripts":null,"_npmVersion":"10.9.4","_nodeVersion":"22.22.0","_hasShrinkwrap":false,"directories":{},"engines":{"node":"^20.19.0 || ^22.12.0 || \u003e=24.0.0"},"exports":{".":{"types":"./types/platform-server.d.ts","default":"./fesm2022/platform-server.mjs"},"./init":{"types":"./types/init.d.ts","default":"./fesm2022/init.mjs"},"./testing":{"types":"./types/testing.d.ts","default":"./fesm2022/testing.mjs"},"./package.json":{"default":"./package.json"}},"browserify":null},"created_at":"2026-02-05T20:24:21.814Z","updated_at":"2026-02-05T20:24:21.814Z","purl":"pkg:npm/%40angular/platform-server@21.2.0-next.1","related_tag":{"name":"v21.2.0-next.1","sha":"5a6fefb6873b519eeb9081058a84b1679f0b50e7","kind":"commit","published_at":"2026-01-28T20:49:59.000Z","download_url":"https://codeload.github.com/angular/angular/tar.gz/v21.2.0-next.1","html_url":"https://github.com/angular/angular/releases/tag/v21.2.0-next.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/angular/angular@v21.2.0-next.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/angular%2Fangular/tags/v21.2.0-next.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/angular%2Fangular/tags/v21.2.0-next.1/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fplatform-server/versions/21.2.0-next.1","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fplatform-server/versions/21.2.0-next.1/codemeta","dependencies":[{"id":1878792689,"ecosystem":"npm","package_name":"xhr2","requirements":"^0.2.0","kind":"runtime","optional":false},{"id":1878792690,"ecosystem":"npm","package_name":"tslib","requirements":"^2.3.0","kind":"runtime","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS13NzM5LWd2d3gtZ3JjM84AB-df","identifiers":["GHSA-w739-gvwx-grc3","CVE-2026-111754"],"url":"https://github.com/advisories/GHSA-w739-gvwx-grc3","title":"@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["20.3.33","21.2.25","22.2.1"]},{"uuid":"GSA_kwCzR0hTQS1mNjdqLTJqcXctanBxN84AB66y","identifiers":["GHSA-f67j-2jqw-jpq7","CVE-2026-101895"],"url":"https://github.com/advisories/GHSA-f67j-2jqw-jpq7","title":"Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["20.3.31","21.2.23","22.1.6"]},{"uuid":"GSA_kwCzR0hTQS1qM3IzLW14cXAtcjJwNM4AB66W","identifiers":["GHSA-j3r3-mxqp-r2p4","CVE-2026-88058"],"url":"https://github.com/advisories/GHSA-j3r3-mxqp-r2p4","title":"Angular SSR: XSS via Unescaped Processing Instruction (\u003c?...?\u003e) Nodes in Fallback Raw-Content Elements","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["20.3.30","21.2.22","22.1.4"]},{"uuid":"GSA_kwCzR0hTQS12M3A4LXdocTYtcjVqZ84ABxU4","identifiers":["GHSA-v3p8-whq6-r5jg","CVE-2026-88060"],"url":"https://github.com/advisories/GHSA-v3p8-whq6-r5jg","title":"Angular: SSR XSS via Unescaped \u003ctemplate\u003e Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["20.3.30","21.2.22","22.1.4"]},{"uuid":"GSA_kwCzR0hTQS1mNm1yLXBqd2MtMzRtNM4ABxU3","identifiers":["GHSA-f6mr-pjwc-34m4","CVE-2026-88056"],"url":"https://github.com/advisories/GHSA-f6mr-pjwc-34m4","title":"Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["20.3.30","21.2.22","22.1.4"]},{"uuid":"GSA_kwCzR0hTQS12cHg2LThwanItNGczds4ABhGd","identifiers":["GHSA-vpx6-8pjr-4g3v","CVE-2026-69149"],"url":"https://github.com/advisories/GHSA-vpx6-8pjr-4g3v","title":"Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["20.3.27","21.2.19","22.0.7"]},{"uuid":"GSA_kwCzR0hTQS1neHg0LTN4Y3YtZjhxeM4ABYrS","identifiers":["GHSA-gxx4-3xcv-f8qx","CVE-2026-50556"],"url":"https://github.com/advisories/GHSA-gxx4-3xcv-f8qx","title":"@angular/platform-server: Missing `\u003cnoscript\u003e` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["19.2.25","20.3.24","21.2.16","22.0.0-rc.2"]},{"uuid":"GSA_kwCzR0hTQS1ocXI5LWM1NmYtM3g3Zs4ABYrR","identifiers":["GHSA-hqr9-c56f-3x7f","CVE-2026-50555"],"url":"https://github.com/advisories/GHSA-hqr9-c56f-3x7f","title":"@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["19.2.25","20.3.24","21.2.16","22.0.0-rc.2"]},{"uuid":"GSA_kwCzR0hTQS14cnhtLWNwN2otOHhmNs4ABYrF","identifiers":["GHSA-xrxm-cp7j-8xf6","CVE-2026-50168"],"url":"https://github.com/advisories/GHSA-xrxm-cp7j-8xf6","title":"@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["21.2.15","19.2.23","20.3.22","22.0.0-rc.2"]},{"uuid":"GSA_kwCzR0hTQS1yZmg3LWZ4cWMtcTUyds4ABXH4","identifiers":["GHSA-rfh7-fxqc-q52v","CVE-2026-46417"],"url":"https://github.com/advisories/GHSA-rfh7-fxqc-q52v","title":"@angular/platform-server: SSRF via Hostname Hijacking","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["19.2.22","20.3.21","21.2.13","22.0.0-next.12"]},{"uuid":"GSA_kwCzR0hTQS00NXEyLWdqdmctNzk3M84ABVZq","identifiers":["GHSA-45q2-gjvg-7973","CVE-2026-41423"],"url":"https://github.com/advisories/GHSA-45q2-gjvg-7973","title":"Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["19.2.21","20.3.19","21.2.9","22.0.0-next.8"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fplatform-server"}