{"action":"Upgrade ng-packagr to 10.1.1 or later.","affected":[{"fixed":"10.1.1","introduced":"0"}],"component":"ng-packagr","cve_ids":["CVE-2020-7735"],"ecosystem":"npm","epss":0.0239,"exploited":false,"fixed_versions":["10.1.1"],"ghsa_id":"GHSA-qm28-7hqv-wg5j","id":"tcs_01M5KG6ESZ53BHXECY0XDZ1JAS","modified_at":"2026-07-08T06:49:53.518814735Z","published_at":"2021-05-07T16:47:32Z","references":["https://osv.dev/vulnerability/GHSA-qm28-7hqv-wg5j","https://nvd.nist.gov/vuln/detail/CVE-2020-7735","https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596d","https://github.com/ng-packagr/ng-packagr","https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"GHSA-qm28-7hqv-wg5j","url":"https://osv.dev/vulnerability/GHSA-qm28-7hqv-wg5j"}],"summary":"OS Command Injection in ng-packagr"}