जमा करें #934085: a2ui-project a2ui 0.10.6 CWE-1333जानकारी

शीर्षकa2ui-project a2ui 0.10.6 CWE-1333
विवरणThe regex function of the basic catalog accepts an arbitrary pattern string supplied by the agent and executes it via new RegExp(pattern).test(value) during validation. Patterns with catastrophic backtracking block the renderer's main thread. Validation rules bound to a data-model path are re-evaluated on every data-model change (e.g., each keystroke in a bound TextField).
स्रोत⚠️ https://github.com/a2ui-project/a2ui/issues/2292
उपयोगकर्ता
 colorfullbz (UID 86308)
सबमिशन17/08/2026 03:18 PM (1 महीना पहले)
संयम15/09/2026 05:36 PM (29 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि404283 [a2ui-project a2ui तक 0.10.6 Basic Catalog safe_regex.ts सेवा अस्वीकार]
अंक19

Want to stay up to date on a daily basis?

Enable the mail alert feature now!