{"id":157381479,"number":"21.0.4","published_at":"2025-12-18T20:44:29.214Z","licenses":"MIT","integrity":"sha512-3eSp3h84buLz9/OdOKt11WpXgaIv+7TZ27vxRIhvFOwWauE7YN6EB0E3xTH6dkRppH486w6mIZb+3Nyo4Zll8Q==","status":null,"download_url":"https://registry.npmjs.org/@angular/ssr/-/ssr-21.0.4.tgz","registry_url":"https://www.npmjs.com/package/@angular/ssr/v/21.0.4","documentation_url":null,"install_command":"npm install @angular/ssr@21.0.4","immutable":null,"metadata":{"deprecated":null,"_npmUser":{"name":"google-wombot","email":"node-team-npm+wombot@google.com"},"dist":{"integrity":"sha512-3eSp3h84buLz9/OdOKt11WpXgaIv+7TZ27vxRIhvFOwWauE7YN6EB0E3xTH6dkRppH486w6mIZb+3Nyo4Zll8Q==","shasum":"7783416f1d9626001f73264c0843e1f8ef7380d2","tarball":"https://registry.npmjs.org/@angular/ssr/-/ssr-21.0.4.tgz","fileCount":22,"unpackedSize":1602979,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIDzSuErdp3jaRStS+lM02Y0Bhwhbzp3KcT4gp3n++kaTAiA6T6w9wYXXBTBIpAKQ9Ah+J3ZoWYL9r5dj2jirnrQ1EA=="}]},"gitHead":"1defc12177a933a275f6036f4721309cdfbc3cad","main":null,"scripts":null,"_npmVersion":"10.9.4","_nodeVersion":"22.21.1","_hasShrinkwrap":false,"directories":{},"engines":null,"exports":{"./package.json":{"default":"./package.json"},".":{"types":"./types/ssr.d.ts","default":"./fesm2022/ssr.mjs"},"./node":{"types":"./types/node.d.ts","default":"./fesm2022/node.mjs"}},"browserify":null},"created_at":"2025-12-18T20:45:11.253Z","updated_at":"2025-12-18T20:45:12.576Z","purl":"pkg:npm/%40angular/ssr@21.0.4","related_tag":{"name":"v21.0.4","sha":"b8829e28949eb4edd1e02f73439f1f81a810e4e4","kind":"commit","published_at":"2025-12-18T20:44:01.000Z","download_url":"https://codeload.github.com/angular/angular-cli/tar.gz/v21.0.4","html_url":"https://github.com/angular/angular-cli/releases/tag/v21.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/angular/angular-cli@v21.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/angular%2Fangular-cli/tags/v21.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/angular%2Fangular-cli/tags/v21.0.4/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fssr/versions/21.0.4","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fssr/versions/21.0.4/codemeta","dependencies":[{"id":1833644180,"ecosystem":"npm","package_name":"tslib","requirements":"^2.3.0","kind":"runtime","optional":false},{"id":1833644181,"ecosystem":"npm","package_name":"@angular-devkit/schematics","requirements":"workspace:*","kind":"Development","optional":false},{"id":1833644182,"ecosystem":"npm","package_name":"@angular/common","requirements":"21.0.6","kind":"Development","optional":false},{"id":1833644183,"ecosystem":"npm","package_name":"@angular/compiler","requirements":"21.0.6","kind":"Development","optional":false},{"id":1833644184,"ecosystem":"npm","package_name":"@angular/core","requirements":"21.0.6","kind":"Development","optional":false},{"id":1833644185,"ecosystem":"npm","package_name":"@angular/platform-browser","requirements":"21.0.6","kind":"Development","optional":false},{"id":1833644186,"ecosystem":"npm","package_name":"@angular/platform-server","requirements":"21.0.6","kind":"Development","optional":false},{"id":1833644187,"ecosystem":"npm","package_name":"@angular/router","requirements":"21.0.6","kind":"Development","optional":false},{"id":1833644188,"ecosystem":"npm","package_name":"@schematics/angular","requirements":"workspace:*","kind":"Development","optional":false},{"id":1833644189,"ecosystem":"npm","package_name":"beasties","requirements":"0.3.5","kind":"Development","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS03ZzdjLWg4cnItN3A2cc4AB7qP","identifiers":["GHSA-7g7c-h8rr-7p6q","CVE-2026-104871"],"url":"https://github.com/advisories/GHSA-7g7c-h8rr-7p6q","title":"Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["20.3.36","21.2.23","22.1.7"]},{"uuid":"GSA_kwCzR0hTQS02OXhyLW04aDYtaDY2NM4ABWW6","identifiers":["GHSA-69xr-m8h6-h664","CVE-2026-44437"],"url":"https://github.com/advisories/GHSA-69xr-m8h6-h664","title":"Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["19.2.25","20.3.25","21.2.9","22.0.0-next.7"]},{"uuid":"GSA_kwCzR0hTQS12ZngyLWh2MmcteGo1Zs4ABT4E","identifiers":["GHSA-vfx2-hv2g-xj5f","CVE-2026-33397"],"url":"https://github.com/advisories/GHSA-vfx2-hv2g-xj5f","title":"Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["20.3.21","21.2.3","22.0.0-next.2"]},{"uuid":"GSA_kwCzR0hTQS14Mjg4LTM3NzgtNGhoeM4ABS2M","identifiers":["GHSA-x288-3778-4hhx","CVE-2026-27739"],"url":"https://github.com/advisories/GHSA-x288-3778-4hhx","title":"Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":["19.2.21","20.3.17","21.1.5","21.2.0-rc.1"]},{"uuid":"GSA_kwCzR0hTQS14aDQzLWcyZnEtd2pyas4ABS2L","identifiers":["GHSA-xh43-g2fq-wjrj","CVE-2026-27738"],"url":"https://github.com/advisories/GHSA-xh43-g2fq-wjrj","title":"Angular SSR has an Open Redirect via X-Forwarded-Prefix","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["19.2.21","20.3.17","21.1.5","21.2.0-rc.1"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@angular%2Fssr"}