EUVD-2021-1167

Malware in sbrugna...

OS Command Injection in ng-packagr

Overview ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option. Recommendation Upgrade to version 10.1.1 or later References - CVE - GitHub Advisory...

@angular-ru/build-tools (14.46.0), @eui/deps-base (>=10.0.0-beta.1, <=10.3.0-snapshot-1601287379391) potentially affected by CVE-2020-7735 via ng-packagr (>=10.0.0, <=10.1.0)

ng-packagr NPM version =10.0.0, =10.0.0-beta.1, =10.3.0-snapshot-1601287379391 Source cves: CVE-2020-7735 Source advisory: OSV:GHSA-QM28-7HQV-WG5J...

OS Command Injection in ng-packagr

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

GHSA-QM28-7HQV-WG5J OS Command Injection in ng-packagr

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

OS Command Injection

ng-packagr vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the styleIncludePaths option...

ng-packagr Command Injection Vulnerability

ng-packagr is an extension library for Js for individual developers . The library can be configured via a configuration file to package the developer's library into the APF format . A command injection vulnerability exists in ng-packagr versions prior to 10.1.1, which stems from command injection...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

Command injection

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735 Command Injection

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

CVE-2020-7735 affects ng-packagr prior to 10.1.1, where the styleIncludePaths option enables OS command injection. Exploitation would allow an attacker to execute arbitrary commands on the host. Remediation: upgrade to ng-packagr 10.1.1 or later. This vulnerability is corroborated across NVD, npm...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

PT-2020-19752

Name of the Vulnerable Software and Affected Versions ng-packagr versions prior to 10.1.1 Description The issue concerns Command Injection via the styleIncludePaths option. Recommendations For versions prior to 10.1.1, update to version 10.1.1 or later to resolve the issue...

CVE-2020-7735: Improper Neutralization of Special Elements used in an OS Command

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

@angular-ru/build-tools (14.46.0), @eui/deps-base (>=10.0.0-beta.1, <=10.3.0-snapshot-1601287379391) potentially affected by CVE-2020-7735 via ng-packagr (>=10.0.0, <=10.1.0)

ng-packagr NPM version =10.0.0, =10.0.0-beta.1, =10.3.0-snapshot-1601287379391 Source cves: CVE-2020-7735 Source advisory: SNYK:JS-NGPACKAGR-1012427...

Command Injection

Overview ng-packagr is a Compile and package a TypeScript library to Angular Package Format Affected versions of this package are vulnerable to Command Injection via the styleIncludePaths option. Remediation Upgrade ng-packagr to version 10.1.1 or higher. References - GitHub Commit Credit: Snyk...