Description (CNA)
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| a2ui-project / a2ui | affected 0.10.0; affected 0.10.1; affected 0.10.2; affected 0.10.3; affected 0.10.4; affected 0.10.5; affected 0.10.6 |
CWE
CWE-1333, CWE-400
References
- https://vuldb.com/vuln/404283
- https://vuldb.com/vuln/404283/cti
- https://vuldb.com/cve/CVE-2026-92114
- https://vuldb.com/submit/934085
- https://github.com/a2ui-project/a2ui/issues/2292
- https://github.com/a2ui-project/a2ui/pull/2366
- https://github.com/a2ui-project/a2ui/
ADP enrichment
No English description supplied.
No references supplied.