All products

@a2ui/web_core

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actionsCVE-2026-10032 · GHSA-72QQ-P3R5-F7WQ @a2ui/web_core npm Critical Fix reported