Approved changes feed: RSS · Atom
cpe:2.3:a:a2ui-project:a2ui:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | A2Ui Project (58895e35-63db-5024-99dc-4baab3c723ab) |
|---|---|
| Product | A2Ui (d8dae8b0-f75a-5d48-ba16-ed9a2d6dd78f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-92114 |
vulnerable | 2026-09-16 04:33:07.976726 |
a2ui-project a2ui Basic Catalog safe_regex.ts redos
MEDIUM (5.3)
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.
Published: 2026-09-15T21:30:19.468Z
Updated: 2026-09-16T19:13:23.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92216 |
vulnerable | 2026-09-16 04:33:07.969343 |
a2ui-project a2ui Binder generic-binder.ts openUrl redirect
MEDIUM (4.3)
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulation results in open redirect. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-16T01:45:16.460Z
Updated: 2026-09-16T19:00:15.882Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92217 |
vulnerable | 2026-09-16 04:33:07.955808 |
a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes
MEDIUM (6.3)
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor.ts of the component Message Parsing. This manipulation causes dynamically-determined object attributes. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-16T02:00:16.889Z
Updated: 2026-09-17T17:06:13.556Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92213 |
vulnerable | 2026-09-16 04:33:07.951467 |
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
MEDIUM (5.5)
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible to be carried out remotely. The patch is named fb8e85aec78d04e81feb9992a57638ca1ec4dc1b. It is suggested to install a patch to address this issue.
Published: 2026-09-16T00:00:24.104Z
Updated: 2026-09-16T19:39:32.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92215 |
vulnerable | 2026-09-16 04:33:07.935146 |
a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery
HIGH (7.3)
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agent_sdks/python/a2ui_agent/src/a2ui/extensions/file_resolve/file_resolver.py of the component FileResolver. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The identifier of the patch is 2bb8423060308bbdea8ba468dabed4fc256d18ea. To fix this issue, it is recommended to deploy a patch.
Published: 2026-09-16T01:30:18.718Z
Updated: 2026-09-16T19:38:20.455Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92214 |
vulnerable | 2026-09-16 04:33:07.901476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.