Description
The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
Remediation
References
https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596d
https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427
Related Vulnerabilities
CVE-2018-20595 Vulnerability in maven package org.hswebframework.web:hsweb-system-oauth2-client-web
CVE-2021-21174 Vulnerability in npm package electron
CVE-2023-37912 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-macro-footnotes
CVE-2022-3783 Vulnerability in npm package node-red-dashboard
CVE-2023-42795 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core