{"id":9779,"date":"2025-08-05T19:53:47","date_gmt":"2025-08-05T19:53:47","guid":{"rendered":"http:\/\/localhost\/?p=9779"},"modified":"2025-08-05T19:53:47","modified_gmt":"2025-08-05T19:53:47","slug":"vision-ui-security-kitjs-potential-uncontrolled-resource-allocation-vulnerability","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9779","title":{"rendered":"Vision UI security-kit.js: Potential Uncontrolled Resource Allocation Vulnerability"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nVision UI security-kit.js: Potential Uncontrolled Resource Allocation Vulnerability<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-08-05T23:37:28.995Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-08-05T23:37:28.995Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nDavidOsipov<\/td>\n<\/tr>\n
Product<\/th>\nVision-ui<\/td>\n<\/tr>\n
Version<\/th>\n< 1.5.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n8.7 (HIGH)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:N\/UI:N\/VC:N\/VI:N\/VA:H\/SC:N\/SI:N\/SA:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nVision UI versions 1.4.0 and below have vulnerabilities in the generateSecureId and getSecureRandomInt functions, allowing Denial of Service attacks through memory exhaustion and high CPU usage. These issues are resolved in version 1.5.0.<\/td>\n<\/tr>\n
AI Severity<\/th>\nCritical<\/td>\n<\/tr>\n
AI Vendor<\/th>\nDavidOsipov<\/td>\n<\/tr>\n
AI Product<\/th>\nVision-ui<\/td>\n<\/tr>\n
AI Version<\/th>\n< 1.5.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n