CVE-2023-35816: Devexpress

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.

Affected products

• Devexpress Devexpress: before 21.2.12 (fixed in 21.2.12); version 22.1.8 only; version 22.2.4 only; version 22.2.5 only

Published 2025-04-28. Last modified 2026-06-17.