CVE-2020-7735

6.6 mediumEPSS 2.4%

Medium (6.6) in ng-packagr project ng-packagr. EPSS 2.4% chance of exploitation in the next 30 days. Fixed in ng-packagr 10.1.1.

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Severity

6.6 medium

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-qm28-7hqv-wg5j	npm	ng-packagr	<10.1.1	10.1.1