CVE-2026-120235

The ag-ui-protocol ag-ui component (versions up to 0.0.58 ) contains a security vulnerability in the SSE Parser component. Specifically, the parseSSEStream function located in sdks/typescript/packages/client/src/transform/sse.ts is susceptible to manipulation that leads to resource consumption . ...