A2aproject A2a-Java
10 CVEs affecting A2aproject A2a-Java. Latest disclosed: 2026-10-27. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-111765 | High | 7.5 | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpC… |
CVE-2026-111764 | High | 7.5 | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authori… |
CVE-2026-90819 | High | 7.3 | 2026-09-14 | A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file s… |
CVE-2026-111761 | Medium | 5.8 | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to… |
CVE-2026-117507 | Medium | 5.4 | 2026-10-27 | A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation lead… |
CVE-2026-117506 | Medium | 4.3 | 2026-10-27 | A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extr… |
CVE-2026-117505 | Medium | 4.3 | 2026-10-27 | A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Per… |
CVE-2026-116479 | Medium | 4.3 | 2026-10-26 | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler. This manipulation… |
CVE-2026-111763 | | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default J… | |
CVE-2026-111762 | | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/o… |