CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

• CWE-78

• https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596dPatch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427Third Party Advisory
• https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596dPatch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427Third Party Advisory

Published

Sep 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7727All versions of package gedi are vulnerable to Prototype Pol…9.8
• CVE-2020-7729The package grunt before 1.3.0 are vulnerable to Arbitrary C…7.1
• CVE-2020-7730The package bestzip before 2.1.7 are vulnerable to Command I…9.8
• CVE-2020-7731This affects all versions <0.7.0 of package github.com/russe…7.5
• CVE-2020-7733The package ua-parser-js before 0.7.22 are vulnerable to Reg…7.5
• CVE-2020-7734All versions of package cabot are vulnerable to Cross-site S…8.2
• CVE-2020-7736The package bmoor before 0.8.12 are vulnerable to Prototype …9.8
• CVE-2020-7737All versions of package safetydance are vulnerable to Protot…9.8
• CVE-2020-7738All versions of package shiba are vulnerable to Arbitrary Co…8.3
• CVE-2020-7739This affects all versions of package phantomjs-seo. It is po…8.2
• CVE-2020-7740This affects all versions of package node-pdf-generator. Due…8.2
• CVE-2020-7741This affects the package hellojs before 1.18.6. The code get…9.9