Skip to content
OpenAdvisories

Package · Maven

org.a2aproject.sdk:a2a-java-sdk-parent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2026-111763

    A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default JDK-based client to forward a configured API key to a third-party server. When a client application c…

    a2aproject a2a-java org.a2aproject.sdk:a2a-java-sdk-parent Maven