Skip to content
Aag-ui-protocol
Products
| Product | CVEs | Exploited | Latest |
| ag-ui | 15 | – | Nov 1, 2026 |
Exploited and recent CVEs
-
CVE-2026-120237
Medium 4.3
ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption
0.4%
-
CVE-2026-120236
Medium 6.3
ag-ui-protocol ag-ui Transport Decoder input validation
0.3%
-
CVE-2026-120235
Medium 4.3
ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption
0.4%
-
CVE-2026-120234
Medium 4.3
ag-ui-protocol ag-ui HTTP Transport e.text resource consumption
0.3%
-
CVE-2026-120233
Medium 5.3
ag-ui-protocol ag-ui HttpAgent http.ts information disclosure
0.4%
-
CVE-2026-101101
Medium 4.3
ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception
0.4%
-
CVE-2026-101100
Medium 5.4
ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup
0.3%
-
CVE-2026-101099
Medium 4.3
ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition
0.4%
-
CVE-2026-101098
Medium 4.3
ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption
0.3%
-
CVE-2026-92363
Medium 4.3
ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption
0.5%
-
CVE-2026-92362
High 7.3
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
0.5%
-
CVE-2026-92361
Medium 4.3
ag-ui-protocol ag-ui SSE Client client.go resource consumption
0.5%
-
CVE-2026-92360
Medium 6.3
ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation
0.2%
-
CVE-2026-92359
Low 3.1
ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy
0.3%
-
CVE-2026-92184
Medium 6.3
ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
0.4%