AZUI web-core theme values lack validation enabling CSS injection via createSurface
Security Advisory
Medium
a2ui-project
Affected:
- azui/web-core
- a2ui-project/a2ui
Referenced CVEs:
CVE-2026-92213 · 5.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.