GHSA-prc3-vjfx-vhm9

All versions of package angular are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.

NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained package @angular/core.

Database specific

{
    "nvd_published_at": "2022-07-15T20:15:00Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "github_reviewed_at": "2022-07-20T00:41:18Z",
    "severity": "MODERATE",
    "github_reviewed": true
}

References

Affected packages

npm / angular

Package

Name: angular; View open source insights on deps.dev
Purl: pkg:npm/angular

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.8.3