CVE-2026-71569 Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name

Server-Side Request Forgery SSRF vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified a push notification webhook host in two places that did not agree. A host written as an IP literal was matched against a list of...

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506

A weakness in the Push Notification Config Store component of a2aproject a2a-java (versions up to 1.2.0.Final ) allows for remote resource consumption. The vulnerability exists within the InMemoryPushNotificationConfigStore.setInfo function of the JpaDatabasePushNotificationConfigStore.java file....

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

org.a2aproject.sdk:a2a-java-sdk-examples-cloud-deployment-server (>=1.0.0.alpha4, <=1.2.0.final) potentially affected by CVE-2026-117506 via org.a2aproject.sdk:a2a-java-extras-push-notification-config-store-database-jpa (>=1.0.0.alpha4, <=1.2.0.final)

org.a2aproject.sdk:a2a-java-extras-push-notification-config-store-database-jpa MAVEN version =1.0.0.alpha4, =1.0.0.alpha4, =1.2.0.final Source cves: CVE-2026-117506 Source advisory: MEND:CVE-2026-117506...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

EUVD-2026-110929

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

PT-2026-126612

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

Agent2Agent A2A Java SDK resource management error vulnerability

Agent2Agent A2A Java SDK versions 1.2.0.Final and earlier contain a resource management error vulnerability. This vulnerability stems from improper handling in the InMemoryPushNotificationConfigStore.setInfo function within the Push Notification Config Store component. Specifically, it involves...

CVE-2026-116478

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

CVE-2026-116478

The a2aproject a2a-go software (versions up to 2.4.0 ) contains a vulnerability in the Push Notification Handler component. Specifically, the CreateExecutor function within the file a2asrv/agentexec.go is susceptible to a flaw that allows for information exposure through error messages. This vuln...

CVE-2026-116478 a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

CVE-2026-116478 a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

CVE-2026-116478

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

CVE-2026-116478 a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

EUVD-2026-110075

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

PT-2026-125104

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

Agent2Agent A2A Go SDK information disclosure vulnerability

Agent2Agent A2A Go SDK versions 2.4.0 and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling of error messages in the CreateExecutor function within the a2asrv/agentexec.go file in the Push Notification Handler component, potentially leading t...