A2a-java (A2aproject) - vulnerabilities (CVEs)
6 CVEs, 5 in the last 30 days, 4 known versions, newest CVE from 2026-10-27. Vendor: A2aproject.
CVEs of A2a-java
- CVE-2026-117507 - CVSS 5.4 (medium), 2026-10-27: A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation…
- CVE-2026-117506 - CVSS 5.3 (medium), 2026-10-27: A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file…
- CVE-2026-117505 - CVSS 5.3 (medium), 2026-10-27: A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue.…
- CVE-2026-116479 - CVSS 5.3 (medium), 2026-10-26: A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler. This…
- CVE-2026-111765 - CVSS 7.5 (high), 2026-10-20: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the…
- CVE-2026-111764 - CVSS 7.5 (high), 2026-10-20: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no…
- CVE-2026-111763 - CVSS 5.7 (medium), 2026-10-20: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default…
- CVE-2026-111762 - CVSS 5.7 (medium), 2026-10-20: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in…
- CVE-2026-111761 - CVSS 5.8 (medium), 2026-10-20: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to…
- CVE-2026-90820 - CVSS 5.3 (medium), 2026-09-14: A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks…
- CVE-2026-90819 - CVSS 7.3 (high), 2026-09-14: A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file…
