Search for packages
| purl | pkg:npm/angular@1.2.0-rc.3 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-7x27-g8rg-x87w
Aliases: CVE-2026-11998 |
Angular's deprecated package has a Cross-Site Scripting issue A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain … | There are no reported fixed by versions. |