Approved changes feed: RSS · Atom

cpe:2.3:a:ng-packagr_project:ng-packagr:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNg Packagr Project (ed3ebbdf-c81c-597d-9740-932d43395e14)
ProductNg Packagr (ea8b2da1-05db-58cb-b8fa-7178daee186e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ng-packagr/ng-packagr purl2cpe 2026-06-01 10:15:29.993214
pkg:npm/ng-packagr purl2cpe 2026-06-01 10:15:29.993217

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7735 vulnerable 2026-06-08 05:27:14.079198 Command Injection
MEDIUM (6.6)
The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
Published: 2020-09-25T12:10:15.254Z
Updated: 2024-09-16T20:11:24.291Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.