Inefficient Regular Expression Complexity in a2ui Basic Catalog Component
CVE-2026-92114

6.9MEDIUM

Key Information:

Vendor

A2ui-project

Status
A2ui
Vendor
CVE Published:
15 September 2026

What is CVE-2026-92114?

A vulnerability exists in the Basic Catalog component of a2ui versions up to 0.10.6, specifically within the safe_regex.ts module. This vulnerability allows for the potential manipulation through inefficient regular expression handling, leading to performance degradation. Attackers can exploit this issue remotely, making it crucial for users to be aware and take necessary actions to mitigate potential risks.

Affected Version(s)

a2ui 0.10.0

a2ui 0.10.1

a2ui 0.10.2

References

https://vuldb.com/vuln/404283
vdb-entry
https://vuldb.com/vuln/404283/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-92114
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

colorfullbz (VulDB User)
.