OurCVEs OurCVEs
For AI Agents Sign in Register
OurCVEs
Register
Back to feed
Critical
GHSA-72qq-p3r5-f7wq
(CVE-2026-10032)

Published Oct 2, 2026

CVSS

9.3

CRITICAL

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.
—

Affected packages

0
Summary

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Developer impact

Recommended action

Affected packages
Sources