a2ui-project has 8 CVEs on record. Disclosure cadence is accelerating: 8 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 8. The median CVSS is 4.8 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.8
- Publish → KEV
- —
- Last 90 days
- 8 prev 0
Weakness classes
Products
- a2ui 8
Worst active — by depth score
CVE-2026-92215High· 7.3A vulnerability has been found in a2ui-project a2ui up to 0.10.740CVE-2026-92217Medium· 6.3A vulnerability was determined in a2ui-project a2ui up to 0.10.635CVE-2026-92213Medium· 5.5A vulnerability was detected in a2ui-project a2ui up to 0.10.630CVE-2026-92114Medium· 5.3A vulnerability was identified in a2ui-project a2ui up to 0.10.629CVE-2026-92357Medium· 4.3A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.024
a2ui-project vulnerabilities
CVEs affecting a2ui-project, newest first. Open any entry for full detail, references, and exploit status.
8 CVEsRSS
CVE-2026-92357Medium· 4.3A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0
A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument current[segment] leads to information disc…
CVE-2026-92356Medium· 4.3A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1
A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basic_functions.ts of the component Update Components. Executing a manipulation can lead to resource consumption.…
CVE-2026-92217Medium· 6.3A vulnerability was determined in a2ui-project a2ui up to 0.10.6
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor.ts of the component Message Parsing. This manipulation cause…
CVE-2026-92216Medium· 4.3A vulnerability was found in a2ui-project a2ui up to 0.10.7
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulation results in open red…
CVE-2026-92214Low· 3.5A flaw has been found in a2ui-project a2ui up to 0.10.7
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sanitizer-markdown-renderer-service.ts of the component a2a-c…
CVE-2026-92215High· 7.3A vulnerability has been found in a2ui-project a2ui up to 0.10.7
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agent_sdks/python/a2ui_agent/src/a2ui/extensions/file_resolve/file_resolver.py of the component FileRe…
CVE-2026-92213Medium· 5.5A vulnerability was detected in a2ui-project a2ui up to 0.10.6
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argume…
CVE-2026-92114Medium· 5.3A vulnerability was identified in a2ui-project a2ui up to 0.10.6
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to in…