CVE-2026-92114

Name of the Vulnerable Software and Affected Versions a2ui-project a2ui versions prior to 0.10.7

Description A remote attack can be launched against the Basic Catalog component due to inefficient regular expression complexity within an unknown function in the file renderers/web core/src/v0 9/basic catalog/functions/safe regex.ts. This issue can lead to a Regular Expression Denial of Service (ReDoS), where a specially crafted input causes the system to consume excessive resources during processing.

Recommendations Update to a version newer than 0.10.6. As a temporary workaround, restrict access to the functions within the renderers/web core/src/v0 9/basic catalog/functions/safe regex.ts file to minimize the risk of exploitation.