EUVD-2021-1167

Malware in sbrugna...

OS Command Injection in ng-packagr

Overview ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option. Recommendation Upgrade to version 10.1.1 or later References - CVE - GitHub Advisory...

OS Command Injection in ng-packagr

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

@angular-ru/build-tools (=14.46.0), @eui/deps-base (>=10.0.0-beta.1 <=10.3.0-snapshot-1601287379391) potentially affected by CVE-2020-7735 via ng-packagr (>=10.0.0 <=10.1.0)

ng-packagr NPM version =10.0.0, =10.0.0-beta.1, =10.3.0-snapshot-1601287379391 Source cves: CVE-2020-7735 Source advisory: OSV:GHSA-QM28-7HQV-WG5J...

GHSA-QM28-7HQV-WG5J OS Command Injection in ng-packagr

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

OS Command Injection

ng-packagr vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the styleIncludePaths option...

ng-packagr Command Injection Vulnerability

ng-packagr is an extension library for Js for individual developers . The library can be configured via a configuration file to package the developer's library into the APF format . A command injection vulnerability exists in ng-packagr versions prior to 10.1.1, which stems from command injection...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

Command injection

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735 Command Injection

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

CVE-2020-7735 affects ng-packagr prior to 10.1.1, where the styleIncludePaths option enables OS command injection. Exploitation would allow an attacker to execute arbitrary commands on the host. Remediation: upgrade to ng-packagr 10.1.1 or later. This vulnerability is corroborated across NVD, npm...

Command Injection

Overview ng-packagr is a Compile and package a TypeScript library to Angular Package Format Affected versions of this package are vulnerable to Command Injection via the styleIncludePaths option. Remediation Upgrade ng-packagr to version 10.1.1 or higher. References - GitHub Commit Credit: Snyk...