tocsin

Debian/angular.js: medium 5.4

angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes pars

Action: Upgrade angular.js to 1.8.0-1 or later.

Affected

introducedfixedlast affected
01.8.0-1-

Fixed versions

1.8.0-1

Sources

published · modified · JSON