| Package | Affected versions | Patched versions |
|---|---|---|
| angularjs | < 1.8.0 | 1.8.0 |
| angular | < 1.8.0 | 1.8.0 |
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping <option> elements in <select> ones changes parsing behavior, leading to possibly unsanitizing code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free