Vulnerabilities in angular 1.4.9