Skip to content
OpenAdvisories

Package · Maven

org.a2aproject.sdk:a2a-java-sdk-transport-rest

1 known vulnerabilities.

1 result · Feed

  • Medium 5.7

    A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/transport/rest/handler/RestHandler.java` logs the entire JSON request body at SEVE…