Vulnerabilities
Summary — last 7 days
New vulnerabilities3,516▼ 1,241 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)691▲ 631 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | High (7.5) | — | — | A2A Java SDKAI | 10/20/2026 | 10/20/2026 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpClient synchronous POST path overrides the disabled-redirect setting in AndroidA2AHttpClient.createConnection() with the PostBuilder default followRedirects… | |
| Received | Medium (5.7) | — | — | A2aproject A2A Java SDKAI | 10/20/2026 | 10/20/2026 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default JDK-based client to forward a configured API key to a third-party server. When a client application configures credentials through `CredentialService`,… | |
| Received | Medium (5.7) | — | — | A2aproject A2A Java SDKAI | 10/20/2026 | 10/20/2026 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/transport/rest/handler/RestHandler.java` logs the entire JSON request body at SEVERE level when JsonFormat.parser().merge() throws… | |
| Received | Medium (5.8) | — | — | A2aproject A2A Java SDKAI | 10/20/2026 | 10/20/2026 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNotificationConfig without destination validation, scheme restrictions, or bounds on redirects. InMemoryPushNotificationConfigStore.setInfo… |