a2aproject vulnerabilities

Newest CVEs

• CVE-2026-118128

  a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

  a2aproject · a2a-js

  Medium6.9
• CVE-2026-117507

  a2aproject a2a-java TaskManager.saveTaskEvent race condition

  a2aproject · a2a-java

  Medium5.3
• CVE-2026-117506

  a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

  a2aproject · a2a-java

  Medium5.3
• CVE-2026-117505

  a2aproject a2a-java ChildQueue queue.offer resource consumption

  a2aproject · a2a-java

  Medium5.3
• CVE-2026-117504

  a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service

  a2aproject · a2a-go

  Medium6.9
• CVE-2026-117503

  a2aproject a2a-go REST SSE handler rest.go resource consumption

  a2aproject · a2a-go

  Medium6.9
• CVE-2026-116479

  a2aproject a2a-java JSON-RPC Error getMessage information exposure

  a2aproject · a2a-java

  Medium5.3
• CVE-2026-116478

  a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

  a2aproject · a2a-go

  Medium6.9
• CVE-2026-116477

  a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure

  a2aproject · a2a-dotnet

  Medium5.3
• CVE-2026-116476

  a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition

  a2aproject · a2a-dotnet

  Medium5.3