Vulnerabilities

TI-2026-83636 CVE-2026-120237 · GHSA-frhv-cjfr-w99c

Uncontrolled resource consumption in ag-ui-protocol ag-ui

MEDIUM 57

A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00407 Published 2026-11-01 No fix listed CWE-400

TI-2026-83635 CVE-2026-120236 · GHSA-42cj-2xxr-4gv8

Improper input validation in ag-ui-protocol ag-ui Transport Decoder

MEDIUM 57

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00267 Published 2026-11-01 No fix listed CWE-20

TI-2026-83632 CVE-2026-120235 · GHSA-33qq-jfxc-p6qp

Uncontrolled resource consumption in ag-ui SSE parser

MEDIUM 57

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-11-01 No fix listed CWE-400

TI-2026-83628 CVE-2026-120234 · GHSA-vf2p-gqc3-r3jh

Resource consumption in ag-ui-protocol ag-ui HTTP Transport

MEDIUM 57

A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00303 Published 2026-11-01 No fix listed CWE-400

TI-2026-83626 CVE-2026-120233 · GHSA-mm62-6q8x-jm5m

Information disclosure in ag-ui HttpAgent client

HIGH 72

A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-11-01 No fix listed CWE-200

TI-2026-65130 CVE-2026-101101 · GHSA-chh6-2pfh-pc8w

ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception

LOW 24

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-28 Fixed in 2026-09-08 CWE-248

TI-2026-65129 CVE-2026-101100 · GHSA-3mm7-4jh6-p5gf

ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup

LOW 24

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00299 Published 2026-09-28 Fixed in 2026-09-08 CWE-459

TI-2026-65128 CVE-2026-101099 · GHSA-pcr3-24cw-387c

ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition

LOW 24

A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0039 Published 2026-09-28 No fix listed CWE-755

TI-2026-65127 CVE-2026-101098 · GHSA-526v-5gxg-x6jc

ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

LOW 24

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00303 Published 2026-09-28 No fix listed CWE-400

TI-2026-62299 CVE-2026-92363 · GHSA-gh4c-79cj-jr5j

ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption

LOW 25

A flaw has been found in ag-ui-protocol ag-ui 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00545 Published 2026-09-16 No fix listed CWE-400

TI-2026-62298 CVE-2026-92362 · GHSA-469m-pffj-3v74

ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption

LOW 37

A vulnerability was detected in ag-ui-protocol ag-ui 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00527 Published 2026-09-16 No fix listed CWE-400

TI-2026-62297 CVE-2026-92361 · GHSA-mfh9-w5jm-cv27

ag-ui-protocol ag-ui SSE Client client.go resource consumption

LOW 25

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00533 Published 2026-09-16 No fix listed CWE-400

TI-2026-62296 CVE-2026-92360 · GHSA-wvf6-r87g-jh87

ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

LOW 23

A weakness has been identified in ag-ui-protocol ag-ui 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00208 Published 2026-09-16 No fix listed CWE-345

TI-2026-62295 CVE-2026-92359 · GHSA-fq29-84pr-2m3x

ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy

LOW 12

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00274 Published 2026-09-16 Fixed in [email protected] CWE-346

TI-2026-62249 CVE-2026-92184 · GHSA-3863-8rfp-v9rw

ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

LOW 24

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00374 Published 2026-09-15 No fix listed CWE-918

Vulnerabilities

Filters