Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

npm package

@a2ui/web_core

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Critical, CVSS 9.3npmAmendedPublished

    @a2ui/web_core: openUrl permits javascript: URI execution via agent-supplied button actions

    CVE-2026-10032 · GHSA-72qq-p3r5-f7wq

    Affected
    • npm @a2ui/web_core >= 0.9.0, < 0.10.2
    Fixed in
    0.10.2· Vendor fix available
    Issue
    The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS. No non-default configuration is required; the Basic Catalog is enabled by default. Details The vulnerability exists in the openUrl function implementation within the Basic Catalog of @a2ui/webcore (commit 23a003248abbf59da6c376ea64ace91d82d209ff). Sink — renderers/webcore/src/v09/basiccatalog/functions/basicfunctions.ts:428-430: window.open is called unconditionally with the agent-supplied args.url value. No scheme allowlist or blocklist is applied. Insufficient schema validation — renderers/webcore/src/v09/basiccatalog/functions/basicfunctionsapi.ts:453-458: The Zod schema only requires…

    Recommended action: Upgrade to 0.10.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.com (1)osv.dev (2)Source checked Evidence →