EUVD-2026-112546

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely...

CVE-2026-118538

The a2ui-project a2ui component (versions up to 0.12.0 ) is vulnerable due to an issue in the Renderer component's Root.renderComponentTree function, located in src/0.8/ui/root.js. A remote attacker can execute a manipulation leading to dynamically-determined object attributes (CWE-915, CWE-913)....