{"id":"CVE-2026-118537","title":"a2ui Image Player/Video Player/Audio Player Image.js input validation","summary":"A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argu…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:X/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-20"],"product":"a2ui","affected":["a2ui 0.10.0","a2ui 0.10.1","a2ui 0.10.2","a2ui 0.10.3","a2ui 0.10.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-03T14:12:45.433457Z"},"published":"2026-10-28","updated":"2026-11-03","sourceUpdated":"2026-11-03T14:14:14.702Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118537","references":[{"url":"https://vuldb.com/vuln/428014","label":"VDB-428014 | a2ui Image Player/Video Player/Audio Player Image.js input validation"},{"url":"https://vuldb.com/vuln/428014/cti","label":"VDB-428014 | CTI Indicators (IOB, IOC, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-118537","label":"CVE-2026-118537 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1020092","label":"Submit #1020092 | a2ui-project a2ui <=0.10.4 CWE-20"},{"url":"https://github.com/a2ui-project/a2ui/issues/3077"},{"url":"https://github.com/a2ui-project/a2ui/pull/3108"}],"tags":["cve.org"],"epss":0.00379,"epssPercentile":0.32066,"ingestedAt":"2026-10-30T21:09:21.619Z","slug":"CVE-2026-118537","body":"## Overview\n\nA vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argument url results in improper input validation. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.\n\n## Affected\n\n- `a2ui 0.10.0`\n- `a2ui 0.10.1`\n- `a2ui 0.10.2`\n- `a2ui 0.10.3`\n- `a2ui 0.10.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}