AngularJS contains a vulnerability in the sanitization of the [srcset] attribute in <source> HTML elements that allows attackers to bypass image source restrictions, potentially leading to content spoofing. This affects all AngularJS versions up to 1.8.3. AngularJS is end-of-life and will not receive patches for this issue.