EUVD-2021-1167

Malware in sbrugna...

OS Command Injection in ng-packagr

Overview ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option. Recommendation Upgrade to version 10.1.1 or later References - CVE - GitHub Advisory...

OS Command Injection in ng-packagr

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

OS Command Injection

ng-packagr vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the styleIncludePaths option...

ng-packagr Command Injection Vulnerability

ng-packagr is an extension library for Js for individual developers . The library can be configured via a configuration file to package the developer's library into the APF format . A command injection vulnerability exists in ng-packagr versions prior to 10.1.1, which stems from command injection...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

Command injection

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735 Command Injection

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option...

CVE-2020-7735

CVE-2020-7735 affects ng-packagr prior to 10.1.1, where the styleIncludePaths option enables OS command injection. Exploitation would allow an attacker to execute arbitrary commands on the host. Remediation: upgrade to ng-packagr 10.1.1 or later. This vulnerability is corroborated across NVD, npm...