CVE-2026-92356

Name of the Vulnerable Software and Affected Versions a2ui versions 0.9 through 0.9.1

Description A remote manipulation of the updateComponents() function within the basic functions.ts file of the Update Components component can lead to excessive resource consumption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the updateComponents() function to minimize the risk of exploitation.