CVE-2026-118128

The a2aproject a2a-js software (versions up to 1.1.0 ) is vulnerable to a race condition within the Task Status Update Handler component. Specifically, the flaw exists in the ResultManager.applyStatusUpdate function located in the file src/server/result_manager.ts. This vulnerability can be explo...