| عنوان | a2ui-project a2ui 0.10.6 CWE-1333 |
|---|
| الوصف | The regex function of the basic catalog accepts an arbitrary pattern string supplied by the agent and executes it via new RegExp(pattern).test(value) during validation. Patterns with catastrophic backtracking block the renderer's main thread. Validation rules bound to a data-model path are re-evaluated on every data-model change (e.g., each keystroke in a bound TextField). |
|---|
| المصدر | ⚠️ https://github.com/a2ui-project/a2ui/issues/2292 |
|---|
| المستخدم | colorfullbz (UID 86308) |
|---|
| ارسال | 17/08/2026 03:18 PM (1 شهر منذ) |
|---|
| الاعتدال | 15/09/2026 05:36 PM (29 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 404283 [a2ui-project a2ui حتى 0.10.6 Basic Catalog safe_regex.ts الحرمان من الخدمة] |
|---|
| النقاط | 19 |
|---|