Medium
5.5
A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function...
CVE-2026-118538
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| a2ui-project | a2ui | — | — |
Original description The description as published by the source.
A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web github.com
- web github.com
- web cna@vuldb.com
- web nvd.nist.gov
- web github.com
- web github.com