Exposure Of Sensitive Information

A2A Java SDK is vulnerable to Exposure of Sensitive Information. The vulnerability is due to improper redirect handling in the Android HTTP client's synchronous POST requests, which allows an attacker controlling a redirected destination to obtain configured API keys or authentication tokens...