13 matches found
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-117507 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-117507 Source advisory: MEND:CVE-2026-117507...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-117506 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-117506 Source advisory: MEND:CVE-2026-117506...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-117505 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-117505 Source advisory: MEND:CVE-2026-117505...
A2A Java SDK Has A Fail-open Default Task Authorization
Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships. - Ecosystem: Maven - Affected package: "org.a2aproject.sdk:a2a-java-sdk-server-common"...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-111761 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-111761 Source advisory: OSV:GHSA-Q78C-5JJQ-57G8...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-111761 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-111761 Source advisory: GHSA-Q78C-5JJQ-57G8...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-111764 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-111764 Source advisory: GHSA-QW47-MCM5-934W...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-111764 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-111764 Source advisory: OSV:GHSA-QW47-MCM5-934W...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-111764 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-111764 Source advisory: MEND:CVE-2026-111764...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-111761 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-111761 Source advisory: MEND:CVE-2026-111761...
PT-2026-120320
Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships. --- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common...
io.agntcy.slim:slim-a2a-java (>=0.1.1, <=0.4.2), io.github.sh1bari:a2a-spring-boot-server-autoconfigure (>=0.1.0, <=0.1.2) +50 more potentially affected by CVE-2026-90820 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.1.0.final, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.1.0.final, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.1.0.final, =1.2.0.fina...
com.flipkart.krystal:lattice-a2a-codegen (>=0.2.1.2-alpha, <=0.6.12), com.openjiuwen:adapter-versatile-agent-java (>=0.1.0, <=0.1.3) +76 more potentially affected by CVE-2026-90819 via org.a2aproject.sdk:a2a-java-sdk-server-common (>=1.0.0.alpha4, <=1.2.0.final)
org.a2aproject.sdk:a2a-java-sdk-server-common MAVEN version =1.0.0.alpha4, =0.2.1.2-alpha, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-90819 Source advisory: MEND:CVE-2026-90819...