Medium
4.3
a2ui-project a2ui data-model.ts DataModel.set resource consumption
CVE-2026-118273
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| a2ui-project | a2ui | — | — |
Original description The description as published by the source.
A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web_core/src/v0_9/state/data-model.ts. Executing a manipulation can lead to resource consumption. It is possible to launch the attack remotely. The exploit has been published and may be used. This patch is called 82789191ce551f4d7a095d273773fb24bd764c9d. A patch should be applied to remediate this issue.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory vuldb.com
- advisory vuldb.com
- advisory vuldb.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- report vuldb.com
- report github.com
- web github.com
- web github.com
- web github.com