A2
Product
a2ui
14
CVEs
0
On KEV
7.3
Max CVSS
6
New 30D
Severity mix
Critical 0High 1Medium 11Low 2
Watch
Add a2ui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92215 | 7.3 | Sep 16 | a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +2 more |
| CVE-2026-92217 | 6.3 | Sep 16 | a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-92213 | 5.5 | Sep 16 | a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-118275 New | 5.3 | Oct 28 | a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-92114 | 5.3 | Sep 15 | a2ui-project a2ui Basic Catalog safe_regex.ts redos Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-118274 New | 4.3 | Oct 28 | a2ui-project a2ui Binder generic-binder.ts resource consumption Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-118273 New | 4.3 | Oct 28 | a2ui-project a2ui data-model.ts DataModel.set resource consumption Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-118272 New | 4.3 | Oct 28 | a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-118271 New | 4.3 | Oct 28 | a2ui-project a2ui data-context Resolver data-context.ts resource consumption Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-92357 | 4.3 | Sep 16 | a2ui-project a2ui Model Processor model-processor.ts information disclosure Affected: 0.8; 0.9; 1.0 |
| CVE-2026-92356 | 4.3 | Sep 16 | a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption Affected: 0.9; 0.9.1 |
| CVE-2026-92216 | 4.3 | Sep 16 | a2ui-project a2ui Binder generic-binder.ts openUrl redirect Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +2 more |
| CVE-2026-118276 New | 3.5 | Oct 28 | a2ui-project a2ui Parser expression_parser.ts formatString resource consumption Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +1 more |
| CVE-2026-92214 | 3.5 | Sep 16 | a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +2 more |
Showing 14