Vendor

    A2aproject

    22 known vulnerabilities in products by A2aproject, 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in A2aproject
    HighCVE-2026-111765

    A2aproject A2a-java: Insufficiently Protected Credentials

    		7.5
    MediumCVE-2026-117503

    a2aproject a2a-go REST SSE handler rest.go resource consumption

    		5.3
    HighCVE-2026-111764

    A2A Java SDK has a fail-open default task authorization

    		7.5
    HighCVE-2026-90819

    A2aproject A2a-java: HTTP Request/Response Splitting

    		7.3
    HighCVE-2026-113704

    A2aproject A2a-rs: Server-Side Request Forgery (SSRF)

    		7.3
    MediumCVE-2026-117504

    a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service

    		5.3
    MediumCVE-2026-111761

    A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

    		5.8
    MediumCVE-2026-116478

    a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

    		5.3
    MediumCVE-2026-118128

    A2aproject A2a-js: Race Condition

    		6.5
    MediumCVE-2026-113705

    a2aproject a2a-rs error.rs information exposure

    		5.3
    MediumCVE-2026-90790

    A2aproject A2a-python: Server-Side Request Forgery (SSRF)

    		6.3
    MediumCVE-2026-117507

    a2aproject a2a-java TaskManager.saveTaskEvent race condition

    		5.4
    MediumCVE-2026-90820

    A2aproject A2a-java: Missing Authorization

    		4.3
    MediumCVE-2026-116479

    a2aproject a2a-java JSON-RPC Error getMessage information exposure

    		4.3
    MediumCVE-2026-116477

    A2aproject A2a-dotnet: Generation of Error Message Containing Sensitive Information

    		4.3
    MediumCVE-2026-117506

    A2aproject A2a-java: Uncontrolled Resource Consumption

    		4.3
    MediumCVE-2026-117505

    a2aproject a2a-java ChildQueue queue.offer resource consumption

    		4.3
    MediumCVE-2026-113707

    a2aproject a2a-rs inmemory.rs update race condition

    		5.4
    MediumCVE-2026-111762

    A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure

    		—
    MediumCVE-2026-111763

    A2aproject A2a-java: Insufficiently Protected Credentials

    		—
    MediumCVE-2026-116476

    a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition

    		5.4
    MediumCVE-2026-113706

    a2aproject a2a-rs inmemory.rs information disclosure

    		3.5

    Products

    Products by A2aproject
    A2a-java110
    A2a-rs40
    A2a-go30