CVE-2026-117503

A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended to address this issue. Patch name: ff6035bd21e44bb3ee1bfa547885b8c08327fa01. It is recommended to upgrade the affected component.

• CWE-400
• CWE-404

• https://github.com/a2aproject/a2a-go/
• https://github.com/a2aproject/a2a-go/commit/ff6035bd21e44bb3ee1bfa547885b8c08327fa01
• https://github.com/a2aproject/a2a-go/pull/396
• https://github.com/a2aproject/a2a-go/releases/tag/v2.5.0
• https://vuldb.com/cve/CVE-2026-117503
• https://vuldb.com/submit/1015052
• https://vuldb.com/vuln/427070
• https://vuldb.com/vuln/427070/cti

Published

Oct 27, 2026

Last Modified

Oct 27, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-117472Psono Server CE && EE versions 4.0.33 through 7.2.3 compared…4.3
• CVE-2026-11748A vulnerability has been identified in centraldogma-server-a…6.9
• CVE-2026-117493Stored cross-site scripting (XSS) in BloX widgets. The /api/…8.3
• CVE-2026-117494Cross-Site Scripting (XSS) in the processing of SVG images s…8.3
• CVE-2026-117499@fastify/session is a session plugin for Fastify. In all rel…3.7
• CVE-2026-1175A vulnerability was identified in birkir prime up to 0.4.0.b…7.5
• CVE-2026-117504A vulnerability was identified in a2aproject a2a-go up to 2.…5.3
• CVE-2026-117505A security flaw has been discovered in a2aproject a2a-java u…4.3
• CVE-2026-117506A weakness has been identified in a2aproject a2a-java up to …4.3
• CVE-2026-117507A security vulnerability has been detected in a2aproject a2a…5.4
• CVE-2026-117509A vulnerability was detected in crownpku Rasa_NLU_Chi up to …6.3
• CVE-2026-11751A vulnerability has been identified in armeria-xds versions …9.1