Threats tagged 'ghsa-42fj-5gr6-hr6m'

A resource consumption vulnerability exists in a2ui-project a2ui up to version 0.10.6 in the data-context Resolver component. The issue affects the file renderers/web_core/src/v0_9/rendering/data-context.ts and can be exploited remotely without user interaction. The vulnerability has a medium severity with a CVSS score of 4.3 and has been publicly disclosed. A patch identified by commit eb314e14fabd29cfb4a74e1202afc4fe2081efa2 is available to address this issue.