VDB
Sign up
MEDIUM6.6

GHSA-qm28-7hqv-wg5j

OS Command Injection in ng-packagr

Quick fix

GHSA-qm28-7hqv-wg5j — ng-packagr: upgrade to the fixed version with the command below.

npm install ng-packagr@10.1.1

Details

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/ng-packagr
Introduced in: 0Fixed in: 10.1.1
Fixnpm install ng-packagr@10.1.1

References