A vulnerability marked as critical has been reported in angular angular-cli up to 19.2.20/20.3.16/21.1.4. The impacted element is an unknown function of the component Relative URL Handler. This manipulation causes server-side request forgery.
This vulnerability is tracked as CVE-2026-27739. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
