---
title: AngularJS – Prototype Pollution Vulnerability Under 1.7.9
description: "Impact Area Security         Severity High         Affected Element **ServiceNow** UI Script **Salesforce** Static Resource Stat ## Rule number **SN-JSL-003 **(for ServiceNow) **SF-JSL-003** (for Salesforce) ## Impact Versions of AngularJS lower than 1.7.9 are vulnerable to…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/angularjs-prototype-pollution-vulnerability-under-1-7-9/"
updated: "2025-03-21"
category: Rules
---

# AngularJS – Prototype Pollution Vulnerability Under 1.7.9

Impact Area

Security

 

 

 

 

           Severity

High

 

 

 

 

           Affected Element

**ServiceNow**

UI Script

**Salesforce**

Static Resource

Stat

## Rule number

**SN-JSL-003 **(for ServiceNow)

**SF-JSL-003** (for Salesforce)

## Impact

Versions of AngularJS lower than 1.7.9 are vulnerable to Prototype Pollution attacks.

## Remediation

Update angular.js to the latest version.

### Time to fix

30 min

## References

This rule is linked to [CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’)](https://cwe.mitre.org/data/definitions/1321.html).