A2ui-project A2ui vulnerabilities

• a2ui-project a2ui a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes CVE-2026-118538 5.1 MediumOctober 28, 2026
• a2ui-project a2ui a2ui Image Player/Video Player/Audio Player Image.js input validation CVE-2026-118537 5.3 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui Parser expression_parser.ts formatString resource consumption CVE-2026-118276 5.1 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption CVE-2026-118275 6.9 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui Binder generic-binder.ts resource consumption CVE-2026-118274 5.3 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui data-model.ts DataModel.set resource consumption CVE-2026-118273 5.3 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure CVE-2026-118272 5.3 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui data-context Resolver data-context.ts resource consumption CVE-2026-118271 5.3 MediumOctober 28, 2026
• a2ui-project a2ui a2ui-project a2ui Model Processor model-processor.ts information disclosure CVE-2026-92357 5.3 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption CVE-2026-92356 5.3 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes CVE-2026-92217 5.3 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui Binder generic-binder.ts openUrl redirect CVE-2026-92216 5.3 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery CVE-2026-92215 6.9 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting CVE-2026-92214 5.1 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection CVE-2026-92213 5.1 MediumSeptember 16, 2026
• a2ui-project a2ui a2ui-project a2ui Basic Catalog safe_regex.ts redos CVE-2026-92114 6.9 MediumSeptember 15, 2026