{"id":140781754,"number":"19.2.15","published_at":"2025-06-11T14:16:18.229Z","licenses":"MIT","integrity":"sha512-a3yKN0RDbXgcE+izNmfuTfyN/tpwh2j0VQblA75re+TDgoovzFE74wqRPe8aGuVS90Uxya/DTkHBm3ajnOMfig==","status":null,"download_url":"https://registry.npmjs.org/@angular/ssr/-/ssr-19.2.15.tgz","registry_url":"https://www.npmjs.com/package/@angular/ssr/v/19.2.15","documentation_url":null,"install_command":"npm install @angular/ssr@19.2.15","immutable":null,"metadata":{"deprecated":null,"_npmUser":{"name":"google-wombot","email":"node-team-npm+wombot@google.com"},"dist":{"shasum":"c1fe31630cec4dae6653e67f0b8053d734875347","tarball":"https://registry.npmjs.org/@angular/ssr/-/ssr-19.2.15.tgz","fileCount":19,"integrity":"sha512-a3yKN0RDbXgcE+izNmfuTfyN/tpwh2j0VQblA75re+TDgoovzFE74wqRPe8aGuVS90Uxya/DTkHBm3ajnOMfig==","signatures":[{"sig":"MEUCICLm0Gqp+W+SOfydhRikOw2uA2HE7wiQHYaiQ9F3EABBAiEAllK5ohDVuT7P09xfHUuH6ToaWpEAciRUKaR2sWRfBP4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1872559},"gitHead":"df97b43431c4ab9e6af4ba574b6dd55303b4a826","main":null,"scripts":null,"_npmVersion":"10.9.2","_nodeVersion":"22.15.1","_hasShrinkwrap":false,"directories":{}},"created_at":"2025-06-18T08:40:15.135Z","updated_at":"2025-06-18T08:40:15.135Z","purl":"pkg:npm/%40angular/ssr@19.2.15","related_tag":{"name":"19.2.15","sha":"101c875eca3cacfff4e5594be89e7f17325c42ea","kind":"commit","published_at":"2025-06-11T14:15:57.000Z","download_url":"https://codeload.github.com/angular/angular-cli/tar.gz/19.2.15","html_url":"https://github.com/angular/angular-cli/releases/tag/19.2.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/angular/angular-cli@19.2.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/angular%2Fangular-cli/tags/19.2.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/angular%2Fangular-cli/tags/19.2.15/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fssr/versions/19.2.15","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fssr/versions/19.2.15/codemeta","dependencies":[{"id":1625890794,"ecosystem":"npm","package_name":"tslib","requirements":"^2.3.0","kind":"runtime","optional":false},{"id":1625890795,"ecosystem":"npm","package_name":"@angular/core","requirements":"19.2.0-rc.0","kind":"Development","optional":false},{"id":1625890796,"ecosystem":"npm","package_name":"@angular/common","requirements":"19.2.0-rc.0","kind":"Development","optional":false},{"id":1625890797,"ecosystem":"npm","package_name":"@angular/router","requirements":"19.2.0-rc.0","kind":"Development","optional":false},{"id":1625890798,"ecosystem":"npm","package_name":"@angular/compiler","requirements":"19.2.0-rc.0","kind":"Development","optional":false},{"id":1625890799,"ecosystem":"npm","package_name":"@schematics/angular","requirements":"workspace:*","kind":"Development","optional":false},{"id":1625890800,"ecosystem":"npm","package_name":"@angular/platform-server","requirements":"19.2.0-rc.0","kind":"Development","optional":false},{"id":1625890801,"ecosystem":"npm","package_name":"@angular/platform-browser","requirements":"19.2.0-rc.0","kind":"Development","optional":false},{"id":1625890802,"ecosystem":"npm","package_name":"@angular-devkit/schematics","requirements":"workspace:*","kind":"Development","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS03ZzdjLWg4cnItN3A2cc4AB7qP","identifiers":["GHSA-7g7c-h8rr-7p6q","CVE-2026-104871"],"url":"https://github.com/advisories/GHSA-7g7c-h8rr-7p6q","title":"Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["20.3.36","21.2.23","22.1.7"]},{"uuid":"GSA_kwCzR0hTQS02OXhyLW04aDYtaDY2NM4ABWW6","identifiers":["GHSA-69xr-m8h6-h664","CVE-2026-44437"],"url":"https://github.com/advisories/GHSA-69xr-m8h6-h664","title":"Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["19.2.25","20.3.25","21.2.9","22.0.0-next.7"]},{"uuid":"GSA_kwCzR0hTQS14Mjg4LTM3NzgtNGhoeM4ABS2M","identifiers":["GHSA-x288-3778-4hhx","CVE-2026-27739"],"url":"https://github.com/advisories/GHSA-x288-3778-4hhx","title":"Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":["19.2.21","20.3.17","21.1.5","21.2.0-rc.1"]},{"uuid":"GSA_kwCzR0hTQS14aDQzLWcyZnEtd2pyas4ABS2L","identifiers":["GHSA-xh43-g2fq-wjrj","CVE-2026-27738"],"url":"https://github.com/advisories/GHSA-xh43-g2fq-wjrj","title":"Angular SSR has an Open Redirect via X-Forwarded-Prefix","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["19.2.21","20.3.17","21.1.5","21.2.0-rc.1"]},{"uuid":"GSA_kwCzR0hTQS1xNjNxLXBnbWYtbXhocs4ABNgF","identifiers":["GHSA-q63q-pgmf-mxhr","CVE-2025-62427"],"url":"https://github.com/advisories/GHSA-q63q-pgmf-mxhr","title":"Angular SSR has a Server-Side Request Forgery (SSRF) flaw","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["21.0.0-next.8","20.3.6","19.2.18"]},{"uuid":"GSA_kwCzR0hTQS02OHgyLW14NHEtNzhtN84ABL8m","identifiers":["GHSA-68x2-mx4q-78m7","CVE-2025-59052"],"url":"https://github.com/advisories/GHSA-68x2-mx4q-78m7","title":"Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["21.0.0-next.3","20.3.0","19.2.16","18.2.21"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fssr"}