Threats tagged 'ghsa-9j57-x538-48q4'

A vulnerability in a2ui-project a2ui up to version 0.10.6 allows remote injection via manipulation of the primaryColor argument in the Angular Renderer component's z.any function. This issue affects the file renderers/web_core/src/v0_9/schema/server-to-client.ts and has a medium severity rating. A patch identified by commit fb8e85aec78d04e81feb9992a57638ca1ec4dc1b is available to address this vulnerability.