EUVD-2026-105127

A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect...

CVE-2026-111763

A2A Java SDK is the official Java SDK for the Agent2Agent A2A Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default JDK-based client to forward a configured API key to a third-party server. When a client application configures credentials through...