Detections
Analytics

SCA: security update for @a2ui/web_core (GHSA-w72q-x6w3-7rj3)

high Tenable Self-Hosted Container Security Plugin ID 471979

Description

Duplicate Advisory: @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Solution

There is no known solution at this time.

See Also

https://github.com/advisories/GHSA-w72q-x6w3-7rj3

Plugin Details

Severity: High

ID: 471979

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/3/2026

Updated: 10/3/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/4/2026

Vulnerability Publication Date: 8/4/2026

Reference Information

cwe: CWE-79