CVE-2026-118275

Description

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/web_core/src/v0_9/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as c76e17272e52c12c6dcf68905b1df978c39e9aa5. It is advisable to implement a patch to correct this issue.

References

https://vuldb.com/vuln/427573/cti

https://vuldb.com/vuln/427573

https://vuldb.com/submit/1015137

https://vuldb.com/cve/CVE-2026-118275

https://github.com/a2ui-project/a2ui/pull/2432

https://github.com/a2ui-project/a2ui/issues/2388

https://github.com/a2ui-project/a2ui/commit/c76e17272e52c12c6dcf68905b1df978c39e9aa5

https://github.com/a2ui-project/a2ui/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111573

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4