CVE-2026-118272 | a2ui-project a2ui up to 0.10.6 Error data-context.ts DataContext.dispatchExpressionError information exposure (Issue 2385)

SecurityVulns
Yanac

A vulnerability identified as problematic has been detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/web_core/src/v0_9/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error message.

This vulnerability is cataloged as CVE-2026-118272. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More