CVE-2026-118272 a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error...

CVE-2026-118272 a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error...

@a2ui/angular (>=0.9.0-alpha.0, <=0.10.7), @a2ui/lit (>=0.9.1, <=0.11.0) +108 more potentially affected by CVE-2026-118272 via @a2ui/web_core (>=0.9.0, <=0.11.0)

@a2ui/webcore NPM version =0.9.0, =0.9.0-alpha.0, =0.9.1, =0.9.0-alpha.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-118272 Source advisory: MEND:CVE-2026-118272...

@a2ui/angular (>=0.8.3, <=0.10.7), @a2ui/lit (>=0.8.2, <=0.11.0) +118 more potentially affected by CVE-2026-118271 via @a2ui/web_core (>=0.8.0, <=0.11.0)

@a2ui/webcore NPM version =0.8.0, =0.8.3, =0.8.2, =0.8.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-118271 Source advisory: SNYK:JS-A2UIWEBCORE-21762016...

Allocation of Resources Without Limits or Throttling

Overview @a2ui/webcore is an A2UI Core Library Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the resolveSignal method of the DataContext class. An attacker can exhaust the memory and CPU of the client by sending an updateComponents...

CVE-2026-118271 a2ui-project a2ui data-context Resolver data-context.ts resource consumption

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...

EUVD-2026-111537

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...

CVE-2026-118271 a2ui-project a2ui data-context Resolver data-context.ts resource consumption

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...

CVE-2026-118271 a2ui-project a2ui data-context Resolver data-context.ts resource consumption

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...

@a2ui/angular (>=0.9.0-alpha.0, <=0.10.7), @a2ui/lit (>=0.9.1, <=0.11.0) +108 more potentially affected by CVE-2026-118271 via @a2ui/web_core (>=0.9.0, <=0.11.0)

@a2ui/webcore NPM version =0.9.0, =0.9.0-alpha.0, =0.9.1, =0.9.0-alpha.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-118271 Source advisory: MEND:CVE-2026-118271...

CVE-2026-118271

The a2ui-project a2ui library (versions up to 0.10.6 ) is vulnerable to a resource consumption vulnerability via the data-context Resolver component. The issue originates from an unknown function within the file renderers/web_core/src/v0_9/rendering/data-context.ts. This flaw allows for remote ma...

CVE-2026-118271

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...

PT-2026-129220

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely...

CVE-2026-118272: a2ui-project a2ui: A vulnerability was detected in a2ui-project a2ui up to 0.10.6

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error...

A2UI resource management error vulnerability

Versions A2UI 0.10.0, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, and 0.10.6 contain a resource management error vulnerability. This vulnerability arises from the Parser component’s interaction with the formatString function in the file...

CVE-2026-118537: n/a a2ui: A vulnerability was found in a2ui up to 0.10.4

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v09/basiccatalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argument url results in improper input validation. The attack may ...

A2UI input validation error vulnerability

Versions A2UI 0.10.4 and earlier contain an input validation error vulnerability. This vulnerability stems from improper input handling of the ‘url’ parameter in the file src/v09/basiccatalog/components/Image.js within the Image Player/Video Player/Audio Player components. Attackers can exploit...

A2UI resource management error vulnerability

Versions A2UI 0.10.6 and earlier contain a resource management error vulnerability. This vulnerability stems from improper handling of unknown functions in the file renderers/webcore/src/v09/rendering/data-context.ts within the data-context Resolver component, potentially leading to excessive...

CVE-2026-118538: a2ui-project a2ui: A vulnerability was determined in a2ui-project a2ui up to 0.12.0

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely...

CVE-2026-118271: a2ui-project a2ui: A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...