Description (CNA)
The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / ng-packagr | affected unspecified before 10.1.1 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427
- https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596d
ADP enrichment
No English description supplied.