GHSA-xrh4-gq3g-5r95MediumCVSS 5.4
A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected...
🔗 CVE IDs covered (1)
📋 Description
A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this issue awaits acceptance.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-116476
- https://github.com/a2aproject/a2a-dotnet/pull/453
- https://github.com/a2aproject/a2a-dotnet
- https://vuldb.com/cve/CVE-2026-116476
- https://vuldb.com/submit/1014886
- https://vuldb.com/vuln/426389
- https://vuldb.com/vuln/426389/cti
- https://github.com/advisories/GHSA-xrh4-gq3g-5r95