CVE-2020-7735

MEDIUM

ng-packagr < 10.1.1 - OS Command Injection via styleIncludePaths Option

Title source: llm

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Core 2

Core References

Third Party Advisory x_refsource_misc

Patch, Third Party Advisory x_refsource_misc

CVSS v3 6.6

EPSS 0.0239

EPSS Percentile 81.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Status published

Products (2)

ng-packagr_project/ng-packagr < 10.1.1

npm/ng-packagr 0 - 10.1.1npm

Published Sep 25, 2020

Tracked Since Feb 18, 2026