~ / search / GHSA-qm28-7hqv-wg5j

GHSA-qm28-7hqv-wg5j

OS Command Injection in ng-packagr

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-7735

Packages

EcosystemPackageAffectedFixed in
npm ng-packagr < 10.1.1 10.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

References

External links from the advisory. They lead to third-party sites.