CVE-2026-118275 | a2ui-project a2ui up to 0.10.6 Resolver data-context.ts DataContext.resolveSignal resource consumption (Issue 2388)

SecurityVulns
Yanac

A vulnerability described as problematic has been identified in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/web_core/src/v0_9/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-118275. The attack can be launched remotely. Moreover, an exploit is present.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More