Threats tagged 'ghsa-4c8v-q557-73fw'

A vulnerability exists in a2ui-project a2ui versions up to 0.12.0 in the Root.renderComponentTree function of the Renderer component. This flaw allows manipulation leading to dynamically-determined object attributes and can be exploited remotely. A fix has been developed but is pending acceptance in a pull request.