OS Command Injection in ng-packagr

Overview ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option. Recommendation Upgrade to version 10.1.1 or later References - CVE - GitHub Advisory...

CVE-2020-7735

CVE-2020-7735 affects ng-packagr prior to 10.1.1, where the styleIncludePaths option enables OS command injection. Exploitation would allow an attacker to execute arbitrary commands on the host. Remediation: upgrade to ng-packagr 10.1.1 or later. This vulnerability is corroborated across NVD, npm...