6.6
Medium
CVE-2020-7735 The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option
Description
The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ng-packagr 10.1 | earliest → < 10.1.1 | 10.1.1 |