Ng-packagr Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ng-packagr Project records in CISA KEV

No Ng-packagr Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2020-06253 CVE-2020-7735 · GHSA-qm28-7hqv-wg5j

LOW 34

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0239 Published 2020-09-25 Fixed in 10.1.1 CWE-78