MEDIUM
GHSA-28hp-fgcr-2r4h
Cross-Site Scripting via JSONP
Quick fix
GHSA-28hp-fgcr-2r4h — angular: upgrade to the fixed version with the command below.
npm install angular@1.6.0Details
JSONP allows untrusted resource URLs, which provides a vector for attack by malicious actors.
Are you affected?
Enter the version of the package you're using.