Vulnerabilities in angular 1.4.8