51 matches found
seclab-taskflow-agent
GitHub Security Lab Taskflow Agent The Security Lab Taskflow Agent is an MCP-enabled multi-Agent framework for declarative, YAML-driven agentic workflows. Built on top of the OpenAI Agents SDK, it uses Pydantic for grammar validation and Jinja2 for template rendering. Core Concepts The Taskflow...
Strands Agents SDK: Exposure Of Data Element To Wrong Session In The A2A Server
Summary Strands Agents SDK is an open-source SDK, available for Python strands-agents and TypeScript @strands-agents/sdk, for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent A2A server shares conversation history across callers with different...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113717 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113717 Source advisory:...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113714 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113714 Source advisory:...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113718 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113718 Source advisory:...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113720 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113720 Source advisory:...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113723 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113723 Source advisory:...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113715 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113715 Source advisory:...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-113719 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-113719 Source advisory:...
@aws-blocks/bb-agent (>=0.1.0, <=0.3.5), @aws-blocks/blocks (>=0.1.0, <=0.4.0) potentially affected by CVE-2026-115419 via @strands-agents/sdk (1.3.0)
@strands-agents/sdk NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @strands-agents/sdk and may be impacted: - @aws-blocks/bb-agent =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2026-115419 Source advisory: GHSA-4V6F-7VJH-6X4M...
EUVD-2026-108507
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server...
GHSA-4V6F-7VJH-6X4M Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
Summary Strands Agents SDK is an open-source SDK, available for Python strands-agents and TypeScript @strands-agents/sdk, for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent A2A server shares conversation history across callers with different...
@aws-blocks/bb-agent (>=0.1.0, <=0.3.5), @aws-blocks/blocks (>=0.1.0, <=0.4.0) potentially affected by CVE-2026-115419 via @strands-agents/sdk (1.3.0)
@strands-agents/sdk NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @strands-agents/sdk and may be impacted: - @aws-blocks/bb-agent =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2026-115419 Source advisory: OSV:GHSA-4V6F-7VJH-6X4M...
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
Summary Strands Agents SDK is an open-source SDK, available for Python strands-agents and TypeScript @strands-agents/sdk, for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent A2A server shares conversation history across callers with different...
@aws-blocks/bb-agent (>=0.1.0, <=0.3.5), @aws-blocks/blocks (>=0.1.0, <=0.4.0) potentially affected by CVE-2026-115419 via @strands-agents/sdk (1.3.0)
@strands-agents/sdk NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @strands-agents/sdk and may be impacted: - @aws-blocks/bb-agent =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2026-115419 Source advisory: SNYK:JS-STRANDSAGENTSSDK-21460720...
Exposure of Data Element to Wrong Session
Overview @strands-agents/sdk is a TypeScript SDK for Strands Agents framework Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the A2A server component multiagent.a2a module, which does not properly isolate conversation state between callers. An...
CVE-2026-115419
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...
CVE-2026-115419 Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...
CVE-2026-115419 Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...
CVE-2026-115419
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...