CVE-2026-92216

Name of the Vulnerable Software and Affected Versions a2ui-project a2ui versions prior to 0.10.8

Description A remote attack can lead to an open redirect, which occurs when an application redirects a user to an untrusted external site. The issue resides in the Binder component within the openUrl() function located in the renderers/web core/src/v0 9/rendering/generic-binder.ts file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the openUrl() function until a patch is available.