← Database

CVE-2026-92213

MEDIUM CVSS: 5.5 Published: 2026-09-16 Modified: 2026-09-16

Description

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible to be carried out remotely. The patch is named fb8e85aec78d04e81feb9992a57638ca1ec4dc1b. It is suggested to install a patch to address this issue.

Affected Platforms

Unknown

Weakness Type

CWE-74, CWE-707

References