All 6 CVE vulnerabilities found in a2ui, with AI-generated Chinese analysis, references, and POCs.
Vendor: a2ui-project
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-92217 | a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes CWE-915 | 6.3 | Medium | 2026-09-16 |
| CVE-2026-92216 | a2ui-project a2ui Binder generic-binder.ts openUrl redirect CWE-601 | 4.3 | Medium | 2026-09-16 |
| CVE-2026-92215 | a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery CWE-918 | 7.3 | High | 2026-09-16 |
| CVE-2026-92214 | a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting CWE-79 | 3.5 | Low | 2026-09-16 |
| CVE-2026-92213 | a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection CWE-74 | 5.5 | Medium | 2026-09-16 |
| CVE-2026-92114 | a2ui-project a2ui Basic Catalog safe_regex.ts redos CWE-1333 | 5.3 | Medium | 2026-09-15 |
All 6 known CVE vulnerabilities affecting a2ui with full Chinese analysis, references, and POCs where available.