Product by A2aproject

    A2a-java

    11 known vulnerabilities in A2a-java (A2aproject), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in A2a-java (A2aproject)
    HighCVE-2026-111765

    A2aproject A2a-java: Insufficiently Protected Credentials

    		7.5
    HighCVE-2026-111764

    A2A Java SDK has a fail-open default task authorization

    		7.5
    HighCVE-2026-90819

    A2aproject A2a-java: HTTP Request/Response Splitting

    		7.3
    MediumCVE-2026-111761

    A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

    		5.8
    MediumCVE-2026-117507

    a2aproject a2a-java TaskManager.saveTaskEvent race condition

    		5.4
    MediumCVE-2026-90820

    A2aproject A2a-java: Missing Authorization

    		4.3
    MediumCVE-2026-116479

    a2aproject a2a-java JSON-RPC Error getMessage information exposure

    		4.3
    MediumCVE-2026-117506

    A2aproject A2a-java: Uncontrolled Resource Consumption

    		4.3
    MediumCVE-2026-117505

    a2aproject a2a-java ChildQueue queue.offer resource consumption

    		4.3
    MediumCVE-2026-111762

    A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure

    		—
    MediumCVE-2026-111763

    A2aproject A2a-java: Insufficiently Protected Credentials

    		—

    All products by A2aproject