TI-2026-81571 CVE-2026-118128 · GHSA-52g9-jqfx-3hp5
Race condition in a2a-js task status update handling
Priority LOW 36
A vulnerability has been found in a2aproject a2a-js up to 1.1.0.
Vulnerabilities
22 records
TI-2026-81358 CVE-2026-117507 · GHSA-wfff-mqj6-rwvg
Race condition in a2aproject a2a-java task manager
Priority LOW 24
A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final.
TI-2026-81356 CVE-2026-117506 · GHSA-w333-36mh-cfv5
Resource consumption in a2a-java push notification config store
Priority LOW 24
A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final.
TI-2026-81355 CVE-2026-117505 · GHSA-6435-vrpp-vvrc
Resource consumption in a2aproject a2a-java ChildQueue
Priority LOW 24
A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final.
TI-2026-81185 CVE-2026-117504 · GHSA-339m-8vxp-vp6f
Denial of service in a2aproject a2a-go Distributed Manager Cancel
Priority LOW 37
A vulnerability was identified in a2aproject a2a-go up to 2.4.0.
TI-2026-81183 CVE-2026-117503 · GHSA-cpqw-hg34-p3wx
Resource consumption in a2aproject a2a-go REST SSE handler
Priority LOW 38
A vulnerability was determined in a2aproject a2a-go up to 2.4.0.
TI-2026-80570 CVE-2026-116479 · GHSA-rr3h-7mh5-mq8p
Information exposure in a2aproject a2a-java JSON-RPC error messages
Priority LOW 24
A flaw has been found in a2aproject a2a-java up to 1.2.0.Final.
TI-2026-80567 CVE-2026-116478 · GHSA-6j8p-4q4m-9rmr
Error message leaks sensitive information in a2a-go CreateExecutor
Priority LOW 37
A vulnerability was detected in a2aproject a2a-go up to 2.4.0.
TI-2026-80563 CVE-2026-116477 · GHSA-6fjg-cx22-jv29
Error messages expose information in a2aproject a2a-dotnet
Priority LOW 24
A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2.
TI-2026-80557 CVE-2026-116476 · GHSA-xrh4-gq3g-5r95
Race condition in a2a-dotnet TaskProjection.ApplyStatus
Priority LOW 23
A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3.
Priority LOW 24
A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4.
Priority LOW 23
A vulnerability was identified in a2aproject a2a-rs up to 0.4.3.
Priority LOW 36
A vulnerability was determined in a2aproject a2a-rs up to 0.4.3.
TI-2026-78519 CVE-2026-113704 · GHSA-cwqm-f4mw-5mhx
Server-side request forgery in a2aproject a2a-rs push notifications
Priority LOW 37
A vulnerability has been found in a2aproject a2a-rs up to 0.4.3.
TI-2026-76905 CVE-2026-111765 · GHSA-4fpj-g9jf-9rgg
Android A2A Java SDK forwards API keys across redirects
Priority HIGH 72
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.
TI-2026-76904 CVE-2026-111764 · GHSA-qw47-mcm5-934w
A2A Java SDK default task store skips authorization on task reads
Priority HIGH 72
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.
TI-2026-76903 CVE-2026-111763 · GHSA-9rhm-2h4x-jwmx
A2A Java SDK sends API keys to third-party servers via redirects
Priority LOW 25
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.
TI-2026-76848 CVE-2026-111762 · GHSA-x32g-jvvm-4725
A2A Java SDK logs push notification credentials in cleartext
Priority LOW 25
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.
TI-2026-76847 CVE-2026-111761 · GHSA-q78c-5jjq-57g8
Server-side request forgery in A2A Java SDK push notifications
Priority HIGH 65
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.
TI-2026-61723 CVE-2026-90820 · GHSA-vmmr-97qx-h8c4
Missing authorization in a2aproject a2a-java
Priority LOW 24
A security vulnerability has been detected in a2aproject a2a-java 1.2.0.
TI-2026-61722 CVE-2026-90819 · GHSA-wwww-x39f-grjc
HTTP response splitting in a2aproject a2a-java
Priority LOW 38
A weakness has been identified in a2aproject a2a-java 1.2.0.
TI-2026-61697 CVE-2026-90790 · GHSA-33c5-chm5-2ggp
Server-side request forgery in a2aproject a2a-python
Priority LOW 24
A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3.