Vulnerabilities of Google @a2ui/web_core
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-10032 | The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the… | 6.1 Medium | Aug 4, 2026 |