Publish GHSA-mhp6-pxh8-r675

This commit is contained in:
advisory-database[bot]
2023-09-08 20:51:44 +00:00
parent 4528681c3d
commit 3c2baa5c9d
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mhp6-pxh8-r675",
"modified": "2021-09-22T18:31:00Z",
"modified": "2023-09-08T20:50:35Z",
"published": "2020-06-18T14:19:58Z",
"aliases": [
"CVE-2020-7676"
],
"summary": "Cross site scripting in Angular",
"details": "angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping \"<option>\" elements in \"<select>\" ones changes parsing behavior, leading to possibly unsanitizing code.",
"details": "angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping `<option>` elements in `<select>` ones changes parsing behavior, leading to possibly unsanitizing code.",
"severity": [
{
"type": "CVSS_V3",
@@ -20,6 +20,11 @@
"ecosystem": "npm",
"name": "angular"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",