a2a-js vulnerabilities

CVEs whose affected-version data names the a2a-js package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118128Medium· 6.5

1w ago

a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/result_manager.ts of the component Task Status Update Handler. Such manipulation leads to ra…

▾ Sunlita2aproject · a2a-jsEPSS 0.36%via CVEORG