A2aproject

11 CVEs in 3 A2aproject products, including A2a-Java, A2a-Rs, A2a-Python. Newest: CVE-2026-113707 (2026-10-21).

A2aproject products with known CVEs

ProductCVEs
A2a-Java6
A2a-Rs4
A2a-Python1
A2aproject CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-113707Medium5.42026-10-21A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src…
CVE-2026-113706Low3.52026-10-21A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipul…
CVE-2026-113705Medium5.32026-10-20A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a ma…
CVE-2026-113704High7.32026-10-20A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sende…
CVE-2026-111765High7.52026-10-20A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpC…
CVE-2026-111764High7.52026-10-20A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authori…
CVE-2026-1117632026-10-20A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default J…
CVE-2026-1117622026-10-20A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/o…
CVE-2026-111761Medium5.82026-10-20A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to…
CVE-2026-90819High7.32026-09-14A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file s…
CVE-2026-90790Medium6.32026-09-14A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function _dispatch_notification of the file src/a2a/server/ta…