Command Injection in syncfusion-license validate via package.json

github.com 2026-07-23查看中文 →

Security AdvisoryGHSA-28g8-x9m2-3w4mCriticalSyncfusion

Affected:

@syncfusion/ej2-base@33.2.3

Referenced CVEs: CVE-2026-16630 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

openclaw-cn Authenticated Local File Disclosure via file:// Scheme Bypass 2026-07-26 datamodel-code-generator customBasePath Code Injection Vulnerability Patch 2026-07-26 NanoClaw add_mcp_server Approval Bypass: Hidden Args and Env Variables Persisted Without Review 2026-07-26 Fix for MCP Server Config Approval Card Rendering Issue Ensuring Full Field Visibility 2026-07-26 NanoClaw Chat SDK Local Gateway Approval Bypass via Unauthenticated Loopback Webhook 2026-07-26

Offline Archive

Offline screenshot & PDF are Pro-exclusive