Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-104871 · Microsoft / collected KEV context

EUVD-2026-91778

GHSA-7g7c-h8rr-7p6q

cve-program · CVE-2026-104871

• https://github.com/angular/angular-cli/security/advisories/GHSA-7g7c-h8rr-7p6q
• https://github.com/angular/angular-cli/commit/645e41a47d21b7651837a4250de99af0509626e2
• https://github.com/angular/angular-cli/commit/70748ca8e76fe4b42798719410336119d943e755
• https://github.com/angular/angular-cli/commit/bb72145f9ab45aee29f523236b3a25cd0813a841
• https://github.com/angular/angular-cli/commit/c3e5982e49705f0f6a913cb94622b4c555d2d914
• https://github.com/angular/angular-cli/releases/tag/v20.3.36
• https://github.com/angular/angular-cli/releases/tag/v21.2.23
• https://github.com/angular/angular-cli/releases/tag/v22.1.7

euvd · EUVD-2026-91778

• https://github.com/angular/angular-cli/security/advisories/GHSA-7g7c-h8rr-7p6q
• https://github.com/angular/angular-cli/commit/645e41a47d21b7651837a4250de99af0509626e2
• https://github.com/angular/angular-cli/commit/70748ca8e76fe4b42798719410336119d943e755
• https://github.com/angular/angular-cli/commit/bb72145f9ab45aee29f523236b3a25cd0813a841
• https://github.com/angular/angular-cli/commit/c3e5982e49705f0f6a913cb94622b4c555d2d914
• https://github.com/angular/angular-cli/releases/tag/v20.3.36
• https://github.com/angular/angular-cli/releases/tag/v21.2.23
• https://github.com/angular/angular-cli/releases/tag/v22.1.7

nvd · CVE-2026-104871

• https://github.com/angular/angular-cli/commit/645e41a47d21b7651837a4250de99af0509626e2
• https://github.com/angular/angular-cli/commit/70748ca8e76fe4b42798719410336119d943e755
• https://github.com/angular/angular-cli/commit/bb72145f9ab45aee29f523236b3a25cd0813a841
• https://github.com/angular/angular-cli/commit/c3e5982e49705f0f6a913cb94622b4c555d2d914
• https://github.com/angular/angular-cli/releases/tag/v20.3.36
• https://github.com/angular/angular-cli/releases/tag/v21.2.23
• https://github.com/angular/angular-cli/releases/tag/v22.1.7
• https://github.com/angular/angular-cli/security/advisories/GHSA-7g7c-h8rr-7p6q

osv · GHSA-7g7c-h8rr-7p6q

• https://github.com/angular/angular-cli/security/advisories/GHSA-7g7c-h8rr-7p6q
• https://nvd.nist.gov/vuln/detail/CVE-2026-104871
• https://github.com/angular/angular-cli/commit/645e41a47d21b7651837a4250de99af0509626e2
• https://github.com/angular/angular-cli/commit/70748ca8e76fe4b42798719410336119d943e755
• https://github.com/angular/angular-cli/commit/bb72145f9ab45aee29f523236b3a25cd0813a841
• https://github.com/angular/angular-cli/commit/c3e5982e49705f0f6a913cb94622b4c555d2d914
• https://github.com/angular/angular-cli
• https://github.com/angular/angular-cli/releases/tag/v20.3.36
• https://github.com/angular/angular-cli/releases/tag/v21.2.23
• https://github.com/angular/angular-cli/releases/tag/v22.1.7

• The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieval logic in @angular/ssr/node, and in @angular/ssr for versio… · Advisory content revised · 11 Nov 2026