Skip to content
OpenAdvisories

Package · Maven

org.a2aproject.sdk:a2a-java-sdk-server-common

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-111764

    A2A Java SDK has a fail-open default task authorization

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTa…

    a2aproject a2a-java org.a2aproject.sdk:a2a-java-sdk-server-common Maven