CVE-2026-118274 | a2ui-project a2ui up to 0.10.6 Binder generic-binder.ts resource consumption (Issue 2387)

October 27, 2026 Yanac

A vulnerability marked as problematic has been reported in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-118274. The attack can be initiated remotely. Additionally, an exploit exists.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More