Skip to content

CVE record · 2 sources

CVE-2026-115419

CVSS 8.1

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not…

Vendor: Node.js
Product: Node.js
CVSS: 8.1
Exposure class: Developer platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

AWS bulletin AWS 9d ago

CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

Bulletin ID: 2026-146-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 13:00 PM PDT Description: Strands Agents is an open-source SDK, available for Python and TypeScript, for building AI…

CVE-2026-115419 Amazon Web Services Node.js
15

CVE NVD 9d ago

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not…

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user…

CVSS 8.1 CVE-2026-115419 Node.js