Skip to content
OpenAdvisories

Product · a2aproject

a2a-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-118128

    a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

    A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/result_manager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The atta…

    a2aproject a2a-js