Vulnerabilities
Summary — last 7 days
New vulnerabilities4,998▲ 140 vs. last week
Critical / high2,116▼ 664 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)824▲ 761 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Medium (5.3) | — | — | A2aproject A2a-rsAI | 10/20/2026 | 10/20/2026 | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemory.rs. The manipulation results in race condition. The attack may be performed from remote. The patch is identified as… | |
| Received | Medium (5.1) | — | — | A2aproject A2a-rsAI | 10/20/2026 | 10/20/2026 | A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of the patch is… | |
| Received | Medium (6.9) | — | — | A2aproject A2a-rsAI | 10/20/2026 | 10/20/2026 | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called… | |
| Received | Medium (6.9) | — | — | A2aproject A2a-rsAI | 10/20/2026 | 10/20/2026 | A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request forgery. The attack… |