69638 matches found
PT-2026-92119
Name of the Vulnerable Software and Affected Versions Yonyou U8 Cloud affected versions not specified Description An unauthenticated Java deserialization issue exists in the nc.impl.pub.filesystem.FileManageServlet component. Remote attackers can execute arbitrary OS commands by sending a...
CLSA-2026-1789427454 TuxCare security update for org.springframework (18 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1...
CVE-2026-90835 michaelliao itranswarp Page Content Rendering Markdown.java Markdown.toHtml cross site scripting
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...
CVE-2026-90820
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...
CVE-2026-90819
A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java of the component Authorization Header...
CVE-2026-13293
IBM MQ Java messaging (JMS client) is vulnerable to remote code execution due to a bypass of the Java deserialization allowlist, enabling an authenticated attacker to execute arbitrary code on systems consuming JMS ObjectMessages. The flaw is classified as CWE-502 (Deserialization of Untrusted Da...
CVE-2026-13293 IBM MQ Java messaging is vulnerable to remote code execution
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote authenticated attacker to execute arbitrary code on the system due to the...
CVE-2026-13293 IBM MQ Java messaging is vulnerable to remote code execution
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote authenticated attacker to execute arbitrary code on the system due to the...
CVE-2026-90820 a2aproject a2a-java AuthorizationRequestHandlerDecorator.java AuthorizationRequestHandlerDecorator.onListTasks authorization
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...
CVE-2026-90820 a2aproject a2a-java AuthorizationRequestHandlerDecorator.java AuthorizationRequestHandlerDecorator.onListTasks authorization
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...
io.agntcy.slim:slim-a2a-java (>=0.1.1, <=0.4.2), io.github.sh1bari:a2a-spring-boot-server-autoconfigure (>=0.1.0, <=0.1.2) +50 more potentially affected by CVE-2026-90820 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.1.0.final, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.1.0.final, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.2.0.fina...
EUVD-2026-78090
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...
CVE-2026-90820
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...
CVE-2026-90820 a2aproject a2a-java AuthorizationRequestHandlerDecorator.java AuthorizationRequestHandlerDecorator.onListTasks authorization
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...
CVE-2026-90820
a2aproject a2a-java 1.2.0 contains a missing authorization flaw in the AuthorizationRequestHandlerDecorator.onListTasks function (file: server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java). The vulnerability allows a remote attacker with...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.2) +73 more potentially affected by CVE-2026-90819 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.1.1 and more Source cves: CVE-2026-90819 Source advisory: MEND:CVE-2026-90819...
CVE-2026-90819 a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting
A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java of the component Authorization Header...
CVE-2026-90819 a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting
A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java of the component Authorization Header...
CVE-2026-90819
A remote HTTP response splitting vulnerability exists in a2aproject a2a-java 1.2.0 , specifically in the BasePushNotificationSender.dispatchNotification function (file: server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java) within the Authorization Header Con...
CVE-2026-90819 a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting
A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java of the component Authorization Header...