CVE-2026-101100

A flaw was found in ag-ui's @ag-ui/client npm package. When processing manipulated tool call inputs in FilterToolCallsMiddleware filter-tool-calls.ts, the middleware fails to perform complete resource and state cleanup. A remote authenticated attacker can exploit this vulnerability by submitting...

CVE-2026-92362: Uncontrolled Resource Consumption

A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request t...