GHSA-28hp-fgcr-2r4h
GHSA-28hp-fgcr-2r4h · Cross-Site Scripting via JSONP
This page contains facts from public vulnerability sources. Check the original advisory before updating.
JSONP allows untrusted resource URLs, which provides a vector for attack by malicious actors.
Fix available
- Published
- Updated
Stack: node
Affected products and versions
angular npm
- Affected ranges
- SEMVER: < 1.6.0
Update to 1.6.0