CVE-2020-7735: NG-Packagr Project NG-Packagr

Medium severity, CVSS 6.6. EPSS: 2.4% chance of exploitation in the next 30 days.

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Affected products

• NG-Packagr Project NG-Packagr: before 10.1.1 (fixed in 10.1.1)

Published 2020-09-25. Last modified 2026-06-17.