a2aproject

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

a2aproject records in CISA KEV

No a2aproject vulnerabilities are listed in CISA KEV.

Records

22 records

TI-2026-76905 CVE-2026-111765 · GHSA-4fpj-g9jf-9rgg

Android A2A Java SDK forwards API keys across redirects

HIGH 72

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00803 Published 2026-10-20 Fixed in 1.3.2.Final CWE-522

TI-2026-76904 CVE-2026-111764 · GHSA-qw47-mcm5-934w

A2A Java SDK default task store skips authorization on task reads

HIGH 72

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2026-10-20 Fixed in 1.3.0.Final CWE-1188

TI-2026-76847 CVE-2026-111761 · GHSA-q78c-5jjq-57g8

Server-side request forgery in A2A Java SDK push notifications

HIGH 65

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00586 Published 2026-10-20 Fixed in 1.3.0.Final CWE-918

TI-2026-81183 CVE-2026-117503 · GHSA-cpqw-hg34-p3wx

Resource consumption in a2aproject a2a-go REST SSE handler

LOW 38

A vulnerability was determined in a2aproject a2a-go up to 2.4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0071 Published 2026-10-27 Fixed in 2.5.0 CWE-400

TI-2026-61722 CVE-2026-90819 · GHSA-wwww-x39f-grjc

HTTP response splitting in a2aproject a2a-java

LOW 38

A weakness has been identified in a2aproject a2a-java 1.2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00661 Published 2026-09-14 Fixed in 1.3.0 CWE-113

TI-2026-81185 CVE-2026-117504 · GHSA-339m-8vxp-vp6f

Denial of service in a2aproject a2a-go Distributed Manager Cancel

LOW 37

A vulnerability was identified in a2aproject a2a-go up to 2.4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00552 Published 2026-10-27 Fixed in 2.5.0 CWE-404

TI-2026-80567 CVE-2026-116478 · GHSA-6j8p-4q4m-9rmr

Error message leaks sensitive information in a2a-go CreateExecutor

LOW 37

A vulnerability was detected in a2aproject a2a-go up to 2.4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00432 Published 2026-10-26 Fixed in 2.5.0 CWE-200

TI-2026-78519 CVE-2026-113704 · GHSA-cwqm-f4mw-5mhx

Server-side request forgery in a2aproject a2a-rs push notifications

LOW 37

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00512 Published 2026-10-20 No fix listed CWE-918

TI-2026-81571 CVE-2026-118128 · GHSA-52g9-jqfx-3hp5

Race condition in a2a-js task status update handling

LOW 36

A vulnerability has been found in a2aproject a2a-js up to 1.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00358 Published 2026-10-27 Fixed in 1.2.0 CWE-362

TI-2026-78640 CVE-2026-113705

Information exposure through error messages in a2aproject a2a-rs

LOW 36

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00332 Published 2026-10-20 No fix listed CWE-200

TI-2026-76903 CVE-2026-111763 · GHSA-9rhm-2h4x-jwmx

A2A Java SDK sends API keys to third-party servers via redirects

LOW 25

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00141 Published 2026-10-20 Fixed in 1.3.0.Final CWE-522

TI-2026-76848 CVE-2026-111762 · GHSA-x32g-jvvm-4725

A2A Java SDK logs push notification credentials in cleartext

LOW 25

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00174 Published 2026-10-20 Fixed in 1.3.0.Final CWE-532

TI-2026-81358 CVE-2026-117507 · GHSA-wfff-mqj6-rwvg

Race condition in a2aproject a2a-java task manager

LOW 24

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00343 Published 2026-10-27 Fixed in 1.3.0.Final CWE-362

TI-2026-81356 CVE-2026-117506 · GHSA-w333-36mh-cfv5

Resource consumption in a2a-java push notification config store

LOW 24

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2026-10-27 Fixed in 1.3.0.Final CWE-400

TI-2026-81355 CVE-2026-117505 · GHSA-6435-vrpp-vvrc

Resource consumption in a2aproject a2a-java ChildQueue

LOW 24

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2026-10-27 Fixed in 1.3.0.Final CWE-400

TI-2026-80570 CVE-2026-116479 · GHSA-rr3h-7mh5-mq8p

Information exposure in a2aproject a2a-java JSON-RPC error messages

LOW 24

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-10-26 Fixed in 1.3.0.Final CWE-200

TI-2026-80563 CVE-2026-116477 · GHSA-6fjg-cx22-jv29

Error messages expose information in a2aproject a2a-dotnet

LOW 24

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-10-26 Fixed in 1.0.0-preview3 CWE-200

TI-2026-78642 CVE-2026-113707

Race condition in a2a-rs InMemoryTaskStore update function

LOW 24

A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-10-20 No fix listed CWE-362

TI-2026-61723 CVE-2026-90820 · GHSA-vmmr-97qx-h8c4

Missing authorization in a2aproject a2a-java

LOW 24

A security vulnerability has been detected in a2aproject a2a-java 1.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00394 Published 2026-09-14 Fixed in 1.3.0 CWE-862

TI-2026-61697 CVE-2026-90790 · GHSA-33c5-chm5-2ggp

Server-side request forgery in a2aproject a2a-python

LOW 24

A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00374 Published 2026-09-14 Fixed in 1.1.4 CWE-918

TI-2026-80557 CVE-2026-116476 · GHSA-xrh4-gq3g-5r95

Race condition in a2a-dotnet TaskProjection.ApplyStatus

LOW 23

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00202 Published 2026-10-26 No fix listed CWE-362

TI-2026-78641 CVE-2026-113706

Information disclosure in a2aproject a2a-rs in-memory task store

LOW 23

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0025 Published 2026-10-20 No fix listed CWE-200

Open these records in search →

Critical	0
High	2
Medium	20
Low	0
No CVSS	0