Description
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sanitizer-markdown-renderer-service.ts of the component a2a-chat-canvas. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| a2ui-project | a2ui | 0.10.0, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, 0.10.6, 0.10.7 | — |
References
- VDB-404459 | a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting vdb-entry
- VDB-404459 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-92214 | CVE Analysis and Report third-party-advisory
- Submit #934108 | a2ui-project a2ui v0.0.1 CWE-79 third-party-advisory
- https://github.com/a2ui-project/a2ui/issues/2294 issue-tracking
- https://github.com/a2ui-project/a2ui/ product