Threats tagged 'ghsa-86jh-jpxp-vvrc'

A vulnerability in a2ui up to version 0.10.4 affects the Image component in the file src/v0_9/basic_catalog/components/Image.js. The flaw involves improper input validation of the url argument, which can be manipulated remotely. A fix has been proposed but is not yet accepted.