A
Vendor security profile
a2ui-project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit0
Patch rate%50
Avg. CVSS5.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
8
0
CVE KEV
CVE severity distribution
8toplam CVE
Medium8 (100%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%0
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
5.3
CVE-2026-92357
a2ui-project a2ui Model Processor model-processor.ts information disclosure
A
Patch verifiedEPSS %0
5.3
CVE-2026-92356
a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption
A
Patch status unknownEPSS %1
5.3
CVE-2026-92217
a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes
A
Patch status unknownEPSS %0
5.3
CVE-2026-92216
a2ui-project a2ui Binder generic-binder.ts openUrl redirect
A
Patch status unknownEPSS %0
6.9
CVE-2026-92215
a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery
A
Patch verifiedEPSS %1
5.1
CVE-2026-92214
a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting
A
Patch status unknownEPSS %0
5.1
CVE-2026-92213
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
A
Patch verifiedEPSS %0
6.9
CVE-2026-92114
a2ui-project a2ui Basic Catalog safe_regex.ts redos
A
Patch verifiedEPSS %1