Threats Tagged 'ghsa-f6mr-pjwc-34m4'
View all threats tagged with 'ghsa-f6mr-pjwc-34m4'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-f6mr-pjwc-34m4'
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability in @angular/platform-server's Server-Side Rendering (SSR) URL resolution allows attackers to bypass same-origin checks due to a discrepancy in Unicode whitespace handling between WHATWG URL parsing and Angular's URL utilities. This can lead to Server-Side Request Forgery (SSRF) and leakage of sensitive server-side credentials such as Authorization headers. The issue arises because Angular's URL resolution trims Unicode whitespace characters that WHATWG URL parsing does not, causing URLs with leading non-breaking spaces to be misinterpreted and routed to attacker-controlled domains. This affects Angular SSR applications that attach sensitive credentials to requests after performing same-origin validation using WHATWG URL parsing. Workarounds include sanitizing input URLs to remove leading Unicode whitespace before validation and not relying solely on WHATWG URL origin checks when input may be trimmed differently. Join the discussion | GCVE Database | 09/10/2026, 20:19:43 UTC Added: 09/10/2026, 22:04:14 UTC |
Showing 1 to 1 of 1 result