org.a2aproject.sdk:a2a-java-sdk-server-common vulnerabilities (Maven)

2 vulnerabilities.

• org.a2aproject.sdk:a2a-java-sdk-server-common Maven A2A Java SDK has a fail-open default task authorization CVE-2026-111764 Fix available 7.5 HighOctober 20, 2026
• org.a2aproject.sdk:a2a-java-sdk-server-common Maven A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery CVE-2026-111761 Fix available 5.8 MediumOctober 20, 2026