AngularJS versions from 1.3.0-rc.4 through 1.8.3 have an improper sanitization vulnerability in the [srcset] attribute. This flaw allows attackers to bypass common image source restrictions, potentially leading to content spoofing attacks. AngularJS is end-of-life and will not receive updates to fix this issue.