Vulnerabilities in angular 1.4.2