| Название | a2ui-project a2ui 0.10.6 CWE-1333 |
|---|
| Описание | The regex function of the basic catalog accepts an arbitrary pattern string supplied by the agent and executes it via new RegExp(pattern).test(value) during validation. Patterns with catastrophic backtracking block the renderer's main thread. Validation rules bound to a data-model path are re-evaluated on every data-model change (e.g., each keystroke in a bound TextField). |
|---|
| Источник | ⚠️ https://github.com/a2ui-project/a2ui/issues/2292 |
|---|
| Пользователь | colorfullbz (UID 86308) |
|---|
| Представление | 17.08.2026 15:18 (1 месяц назад) |
|---|
| Модерация | 15.09.2026 17:36 (29 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 404283 [a2ui-project a2ui до 0.10.6 Basic Catalog safe_regex.ts отказ в обслуживании] |
|---|
| Баллы | 19 |
|---|