CWE-791: Incomplete Filtering of Special Elements
Base
The product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.
Consequences
- Integrity: Unexpected State
Recent advisories
- GHSA-7x27-g8rg-x87w — Angular's deprecated package has a Cross-Site Scripting issue
- GHSA-j58c-ww9w-pwp5 — AngularJS improperly sanitizes SVG elements
- GHSA-mqm9-c95h-x2p6 — AngularJS allows attackers to bypass common image source restrictions
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor