EUVD-2025-18486

Malicious code in bioql PyPI...

CVE-2025-6167

CVE-2025-6167 affects the python-a2a package (up to 0.5.5); the issue is in create_workflow within python_a2a/agent_flow/server/api.py, allowing path traversal. Upgrading to 0.5.6 mitigates the vulnerability. Multiple sources (Red Hat, OSV, GHSA, Snyk, CVE records) describe the same flaw and fix;...

CVE-2025-6167 themanojdesai python-a2a api.py create_workflow path traversal

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

CVE-2025-6167 themanojdesai python-a2a api.py create_workflow path traversal

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

CVE-2025-6167: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...