TI-2026-81673 CVE-2026-118275 · GHSA-485f-gc3c-ph93
Uncontrolled resource consumption in a2ui Resolver
Priority HIGH 70
A vulnerability was found in a2ui-project a2ui up to 0.10.6.
a2ui-project
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
a2ui-project records in CISA KEVNo a2ui-project vulnerabilities are listed in CISA KEV.
Records
15 records
TI-2026-81667 CVE-2026-118274 · GHSA-hp6r-frq8-9pmp
Uncontrolled resource consumption in a2ui Binder component
Priority MEDIUM 57
A vulnerability has been found in a2ui-project a2ui up to 0.10.6.
TI-2026-81657 CVE-2026-118273 · GHSA-m23g-ww56-48rc
Resource consumption in a2ui-project a2ui DataModel.set
Priority MEDIUM 57
A flaw has been found in a2ui-project a2ui up to 0.10.6.
TI-2026-81656 CVE-2026-118272 · GHSA-hxwv-qhw4-49vx
Error message exposes information in a2ui-project a2ui
Priority MEDIUM 57
A vulnerability was detected in a2ui-project a2ui up to 0.10.6.
TI-2026-81638 CVE-2026-118271 · GHSA-42fj-5gr6-hr6m
Uncontrolled resource consumption in a2ui data-context Resolver
Priority MEDIUM 57
A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6.
TI-2026-81674 CVE-2026-118276 · GHSA-5gqh-669g-4hvg
Uncontrolled resource consumption in a2ui expression parser
Priority MEDIUM 56
A vulnerability was determined in a2ui-project a2ui up to 0.10.6.
TI-2026-62216 CVE-2026-92114 · GHSA-m654-p328-j29m
a2ui-project a2ui Basic Catalog safe_regex.ts redos
Priority LOW 38
A vulnerability was identified in a2ui-project a2ui up to 0.10.6.
TI-2026-62253 CVE-2026-92215 · GHSA-c3w9-49h5-9jjq
a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery
Priority LOW 37
A vulnerability has been found in a2ui-project a2ui up to 0.10.7.
TI-2026-62292 CVE-2026-92356 · GHSA-wjg4-544x-cv2w
a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption
Priority LOW 25
A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1.
TI-2026-62254 CVE-2026-92216 · GHSA-hw22-25cv-28g5
a2ui-project a2ui Binder generic-binder.ts openUrl redirect
Priority LOW 25
A vulnerability was found in a2ui-project a2ui up to 0.10.7.
TI-2026-62293 CVE-2026-92357 · GHSA-27g5-xw56-jcm2
a2ui-project a2ui Model Processor model-processor.ts information disclosure
Priority LOW 24
A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0.
TI-2026-62255 CVE-2026-92217 · GHSA-5xvv-9qvw-m2ch
a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes
Priority LOW 24
A vulnerability was determined in a2ui-project a2ui up to 0.10.6.
TI-2026-82245 CVE-2026-118538 · GHSA-4c8v-q557-73fw
Improperly controlled object attribute modification in a2ui Renderer
Priority LOW 23
A vulnerability was determined in a2ui-project a2ui up to 0.12.0.
TI-2026-62252 CVE-2026-92214 · GHSA-fppw-pj6p-xrwh
a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting
Priority LOW 23
A flaw has been found in a2ui-project a2ui up to 0.10.7.
TI-2026-62251 CVE-2026-92213 · GHSA-9j57-x538-48q4
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
Priority LOW 23
A vulnerability was detected in a2ui-project a2ui up to 0.10.6.