| 제목 | a2ui-project a2ui 0.10.6 CWE-1333 |
|---|
| 설명 | The regex function of the basic catalog accepts an arbitrary pattern string supplied by the agent and executes it via new RegExp(pattern).test(value) during validation. Patterns with catastrophic backtracking block the renderer's main thread. Validation rules bound to a data-model path are re-evaluated on every data-model change (e.g., each keystroke in a bound TextField). |
|---|
| 원천 | ⚠️ https://github.com/a2ui-project/a2ui/issues/2292 |
|---|
| 사용자 | colorfullbz (UID 86308) |
|---|
| 제출 | 2026. 08. 17. PM 03:18 (30 날 ago) |
|---|
| 모더레이션 | 2026. 09. 15. PM 05:36 (29 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 404283 [a2ui-project a2ui 까지 0.10.6 Basic Catalog safe_regex.ts 서비스 거부] |
|---|
| 포인트들 | 19 |
|---|