{"action":"Upgrade angular to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0"}],"component":"angular","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-28hp-fgcr-2r4h","id":"tcs_01M5KESGGZW91P3K2NM99NTZM1","modified_at":"2021-02-24T18:32:36Z","published_at":"2019-06-27T17:25:42Z","references":["https://osv.dev/vulnerability/GHSA-28hp-fgcr-2r4h","https://github.com/angular/angular.js/commit/6476af83cd0418c84e034a955b12a842794385c4","https://www.npmjs.com/advisories/1630"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-28hp-fgcr-2r4h","url":"https://osv.dev/vulnerability/GHSA-28hp-fgcr-2r4h"}],"summary":"Cross-Site Scripting via JSONP"}