Product

org.a2aproject.sdk/a2a-java-sdk-http-client-android vulnerabilities

1 published CVE affecting org.a2aproject.sdk/a2a-java-sdk-http-client-android, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.a2aproject.sdk/a2a-java-sdk-http-client-android CVEs

Newest publication first

CVE-2026-111765 A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
Published 2026-10-20

HighCVSS 7.5 EPSS 0.80%

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpClient synchronous POST path overrides the disabled-redirect setting in AndroidA2AHttpClient.createConnection() with the P...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.a2aproject.sdk/a2a-java-sdk-http-client-android vulnerabilities

Latest org.a2aproject.sdk/a2a-java-sdk-http-client-android CVEs

CVE-2026-111765 A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix