PT-2025-5764

Name of the Vulnerable Software and Affected Versions: @syncfusion/ej2-spreadsheet version 27.2.2 Description: A prototype pollution issue in the lib.setValue function allows attackers to cause a Denial of Service DoS by supplying a crafted payload. This issue can be exploited to disrupt service,...

CVE-2024-57064: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...