Lucene search

K
nodejsAnonymousNODEJS:1692
HistoryMay 07, 2021 - 4:50 p.m.

OS Command Injection in ng-packagr

2021-05-0716:50:08
Anonymous
www.npmjs.com
46
ng-packagr
command injection
styleincludepaths
upgrade
cve-2020-7735
github advisory
software

EPSS

0.001

Percentile

42.3%

Overview

ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Recommendation

Upgrade to version 10.1.1 or later

References

EPSS

0.001

Percentile

42.3%