a
a2aproject
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 14, 2026 to present
5
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
34/100
low
🆕 4Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
3Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Infoleak
2
2
Race Condition
1
3
SSRF
1
4
CRLF Injection
1
Most Affected Products
1. a2aproject a2a-rs4
2. a2aproject a2a-java1
Recent Vulnerabilities
See more →CVE-2026-113707
CVSS 5.4medium
a2aproject a2a-rs inmemory.rs update race condition
Oct 20, 2026🔧 No Patch
CVE-2026-113706
CVSS 3.5low
a2aproject a2a-rs inmemory.rs information disclosure
Oct 20, 2026🔧 No Patch
CVE-2026-113705
CVSS 5.3medium
a2aproject a2a-rs error.rs information exposure
Oct 20, 2026🔧 No Patch
CVE-2026-113704
CVSS 7.3high
a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery
Oct 20, 2026🔧 No Patch
CVE-2026-90819
CVSS 6.9EPSS 0%medium
a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting
Sep 14, 2026🔧 No Patch
Monitor a2aproject in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.