There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| angular(npm) | 0 | 1.5.0-beta.1 | N/A |
CVSS Metrics
