Threats tagged 'ghsa-hw22-25cv-28g5'

CVE-2026-92216 is an open redirect vulnerability in the a2ui-project a2ui component affecting versions up to 0.10.7. The issue exists in the openUrl function of the Binder component, allowing remote attackers to manipulate URLs and redirect users to unintended locations. The vulnerability has a medium severity rating with a CVSS score of 4.3. The project has been informed but has not yet responded or issued a fix.