@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Summary The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitra...

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...

PT-2026-105490

Summary The openUrl function in @a2ui/web core passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button,...

@a2ui/agent (>=0.0.1, <=0.1.0), @a2ui/angular (>=0.8.3, <=0.14.0) +143 more potentially affected by CVE-2026-92357 via @a2ui/web_core (>=0.8.0, <=0.15.0)

@a2ui/webcore NPM version =0.8.0, =0.0.1, =0.8.3, =0.8.2, =0.8.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-92357 Source advisory: SNYK:JS-A2UIWEBCORE-21707466...

Information Exposure

Overview @a2ui/webcore is an A2UI Core Library Affected versions of this package are vulnerable to Information Exposure via the Model Processor process in model-processor.ts when manipulating the currentsegment argument. Remediation A fix was pushed into the master branch but not yet published...

@a2ui/agent (>=0.0.1, <=0.1.0), @a2ui/angular (>=0.9.0-alpha.0, <=0.14.0) +133 more potentially affected by CVE-2026-92356 via @a2ui/web_core (>=0.9.0, <=0.15.0)

@a2ui/webcore NPM version =0.9.0, =0.0.1, =0.9.0-alpha.0, =0.9.1, =0.9.0-alpha.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-92356 Source advisory: SNYK:JS-A2UIWEBCORE-21707467...

Denial of Service (DoS)

Overview @a2ui/webcore is an A2UI Core Library Affected versions of this package are vulnerable to Denial of Service DoS in the updateComponents function of basicfunctions.ts. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended an...

CVE-2026-92357

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

CVE-2026-92356

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basicfunctions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informe...

CVE-2026-92357 a2ui-project a2ui Model Processor model-processor.ts information disclosure

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

CVE-2026-92357 a2ui-project a2ui Model Processor model-processor.ts information disclosure

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

EUVD-2026-80659

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

CVE-2026-92357

a2ui-project a2ui versions 0.8, 0.9, and 1.0 contain an information disclosure vulnerability in the Model Processor component (file model-processor.ts). The root cause is manipulation of the argument current[segment], which can be triggered remotely by a low-privileged user with no user interacti...

@a2ui/angular (>=0.8.3, <=0.10.7), @a2ui/lit (>=0.8.2, <=0.11.0) +118 more potentially affected by CVE-2026-92357 via @a2ui/web_core (>=0.8.0, <=0.11.0)

@a2ui/webcore NPM version =0.8.0, =0.8.3, =0.8.2, =0.8.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-92357 Source advisory: MEND:CVE-2026-92357...

CVE-2026-92357 a2ui-project a2ui Model Processor model-processor.ts information disclosure

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

CVE-2026-92357

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

CVE-2026-92356

A resource consumption vulnerability exists in a2ui-project a2ui versions 0.9 and 0.9.1 , affecting the updateComponents function in the file basic_functions.ts (component: Update Components). A remote attacker with low privileges can trigger excessive resource consumption through a manipulation ...

CVE-2026-92356 a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basicfunctions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informe...

CVE-2026-92356 a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basicfunctions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informe...

EUVD-2026-80393

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basicfunctions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informe...