27699 matches found
xalgorix v4.5.100
Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...
CVE-2026-65975 Pydantic AI AG-UI Adapter: A dangling client-submitted tool call can execute when a trailing message is dropped during `sanitize_messages`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but not including 1.107.1 and 2.0.0b1 up to but not including 2.5.0, the UI adapters AG-UI via Agent.toagui/AGUIAdapter, and Vercel AI via VercelAIAdapter use...
CVE-2026-18236
A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...
EUVD-2026-50437
A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...
CVE-2026-18236 Google-ADK Continuation Forgery
A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...
CVE-2026-18236 Google-ADK Continuation Forgery
A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...
CVE-2026-18236
Technical details are not publicly available in the provided documents. The ADK continuation forgery vulnerability description is repeated across sources without specifics on affected versions, exploit methods, or mitigations. Monitor for updates.
software.amazon.opentelemetry:aws-opentelemetry-agent (0.12.1-aws.1) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.12.1)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...
software.amazon.opentelemetry:aws-opentelemetry-agent (0.17.0-aws.1) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.17.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...
software.amazon.opentelemetry:aws-opentelemetry-agent (0.15.0-aws.1) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.15.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...
io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.2.1, <=0.3.0), org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-alpha-3) +2 more potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.0.1)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.2.1,...
org.apache.inlong.agent-common.1.11.0.inlong1.11.org.apache.inlong:agent-common (1.11.0), org.apache.inlong:agent-common (>=1.9.0, <=2.4.0) +145 more potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.28.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: -...
org.hypertrace.agent:javaagent (>=1.1.0, <=1.1.6), software.amazon.opentelemetry:aws-opentelemetry-agent (1.1.0) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.1.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent =1.1.0, =1.1.6 -...
io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.2.1, <=0.3.0), org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-alpha-3) +2 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.0.1)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.2.1,...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the RMI context propagation process. An attacker can cause excessive memory allocation by sending an oversized context propagation payload to a network-reachable RMI endpoint on an...
software.amazon.opentelemetry:aws-opentelemetry-agent (0.15.0-aws.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.15.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...
software.amazon.opentelemetry:aws-opentelemetry-agent (0.17.0-aws.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.17.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...
org.hypertrace.agent:javaagent (>=1.1.0, <=1.1.6), software.amazon.opentelemetry:aws-opentelemetry-agent (1.1.0) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.1.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.hypertrace.agent:javaagent =1.1.0, =1.1.6 -...
software.amazon.opentelemetry:aws-opentelemetry-agent (0.12.1-aws.1) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (0.12.1)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - software.amazon.opentelemetry:aws-opentelemetry-agent...