syncfusion ej2-javascript-ui-controls vulnerabilities

Latest syncfusion ej2-javascript-ui-controls CVEs

Newest publication first

1. CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection

   Published 2026-07-22

   Medium·CVSS 4.8

   A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been di...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.