PT-2026-118419

Name of the Vulnerable Software and Affected Versions A2A Java SDK versions prior to 1.3.0.Final Description The default InMemoryTaskStore configuration does not perform authorization on task reads. The no-argument constructor sets the authorizationProvider to null, and the getString taskId...