@angular/pwa vulnerabilities (TuxCare)

2 vulnerabilities.

• @angular/pwa TuxCare Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows CVE-2026-104871 Fix available 6.3 MediumOctober 2, 2026
• @angular/pwa TuxCare Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline CVE-2026-27739 Public exploitFix available 9.2 CriticalFebruary 25, 2026