EUVD-2026-106878

A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/taskstore/inmemory.rs. The manipulation results in race condition. The attack may be performed from remote. The patch is identified as...

CVE-2026-113707

A security flaw was identified in a2aproject a2a-rs up to version 0.4.4 . The vulnerability exists within the InMemoryTaskStore::update function located in the file a2a-server/src/task_store/inmemory.rs, where a race condition can occur. This flaw may be exploited via a remote attack vector. To r...

CVE-2026-113706

A vulnerability in a2aproject a2a-rs up to version 0.4.3 allows for information disclosure . The flaw resides in an unspecified function within the file a2a-server/src/task_store/inmemory.rs, where the manipulation of the historyLength argument triggers the leak. This vulnerability can be exploit...

EUVD-2026-106877

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/taskstore/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of t...

CVE-2026-113705

The a2aproject a2a-rs software (versions up to 0.4.3 ) contains a vulnerability in the processing of the a2a-server/src/error.rs file. A remote attacker can execute a manipulation that results in information exposure via error messages. To remediate this issue, the patch 713b943af94ab2d521d483b84...

CVE-2026-113704

A vulnerability exists in a2aproject a2a-rs up to version 0.4.3 within the Push Notification Handler component. Specifically, the HttpPushSender function in the file crates/server/src/push_notification_sender.rs is susceptible to server-side request forgery (SSRF) due to the manipulation of the T...