a2ui.

a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes

• a2ui
• Broken access control
• CWE-913

a2ui Image Player/Video Player/Audio Player Image.js input validation

• a2ui
• CWE-20

a2ui-project a2ui Parser expression_parser.ts formatString resource consumption

• a2ui
• Denial of service

a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption

• a2ui
• Denial of service

a2ui-project a2ui Binder generic-binder.ts resource consumption

• a2ui
• Denial of service

a2ui-project a2ui data-model.ts DataModel.set resource consumption

• a2ui
• Denial of service

a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure

• a2ui
• Information disclosure

a2ui-project a2ui data-context Resolver data-context.ts resource consumption

• a2ui
• Denial of service

a2ui-project a2ui Model Processor model-processor.ts information disclosure

• a2ui
• Information disclosure
• Broken access control

a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption

• a2ui
• Denial of service

a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes

• a2ui
• Broken access control
• CWE-913

a2ui-project a2ui Binder generic-binder.ts openUrl redirect

• a2ui
• Open redirect

a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery

• a2ui
• Server-side request forgery (SSRF)

a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting

• a2ui
• Cross-site scripting (XSS)
• Code injection

a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

• a2ui
• Other injection
• CWE-707

a2ui-project a2ui Basic Catalog safe_regex.ts redos

• a2ui
• Denial of service