Search for packages
| purl | pkg:npm/angular@1.3.0-rc.4 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-m9gf-397r-hwpg
Aliases: CVE-2024-8372 |
Improper sanitization of the value of the `[srcset]` attribute in AngularJS allows attackers to bypass common image source restrictions, which … | There are no reported fixed by versions. |