CVE-2026-118273 | a2ui-project a2ui up to 0.10.6 data-model.ts DataModel.set resource consumption (Issue 2386)

October 27, 2026 Yanac

A vulnerability labeled as problematic has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web_core/src/v0_9/state/data-model.ts. Executing a manipulation can lead to resource consumption.

This vulnerability is registered as CVE-2026-118273. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More