Vulnerabilities in a2aproject
22 resultsCVE-2026-111765HIGHA2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fixEPSS 0.8%CVE-2026-117503MEDIUMa2aproject a2a-go REST SSE handler rest.go resource consumptionEPSS 0.7%CVE-2026-90819MEDIUMa2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splittingEPSS 0.7%CVE-2026-111764HIGHA2A Java SDK has a fail-open default task authorizationEPSS 0.6%CVE-2026-111761MEDIUMA2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification deliveryEPSS 0.6%CVE-2026-117504MEDIUMa2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of serviceEPSS 0.6%CVE-2026-113704MEDIUMa2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgeryEPSS 0.5%CVE-2026-116478MEDIUMa2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposureEPSS 0.4%CVE-2026-90820MEDIUMa2aproject a2a-java AuthorizationRequestHandlerDecorator.java AuthorizationRequestHandlerDecorator.onListTasks authorizationEPSS 0.4%CVE-2026-90790MEDIUMa2aproject a2a-python Push Notification Sender base_push_notification_sender.py _dispatch_notification server-side request forgeryEPSS 0.4%CVE-2026-118128MEDIUMa2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race conditionEPSS 0.4%CVE-2026-117507MEDIUMa2aproject a2a-java TaskManager.saveTaskEvent race conditionEPSS 0.3%CVE-2026-113705MEDIUMa2aproject a2a-rs error.rs information exposureEPSS 0.3%CVE-2026-116479MEDIUMa2aproject a2a-java JSON-RPC Error getMessage information exposureEPSS 0.3%CVE-2026-116477MEDIUMa2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposureEPSS 0.3%CVE-2026-117505MEDIUMa2aproject a2a-java ChildQueue queue.offer resource consumptionEPSS 0.3%CVE-2026-117506MEDIUMa2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumptionEPSS 0.3%CVE-2026-113707MEDIUMa2aproject a2a-rs inmemory.rs update race conditionEPSS 0.3%CVE-2026-113706MEDIUMa2aproject a2a-rs inmemory.rs information disclosureEPSS 0.3%CVE-2026-116476MEDIUMa2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race conditionEPSS 0.2%