ZeroHour

CVE-2020-7735

CVSS 3.1
6.6 medium
EPSS
2%p83
Published
()
Modified
Description

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Vendors
ng-packagr project
Products
ng-packagr
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.