Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ag-ui — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in ag-ui, with AI-generated Chinese analysis, references, and POCs.

Vendor: ag-ui-protocol

CVE ID Title CVSS Severity Published
CVE-2026-120237 ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption CWE-400 4.3 Medium 2026-11-01
CVE-2026-120236 ag-ui-protocol ag-ui Transport Decoder input validation CWE-20 6.3 Medium 2026-11-01
CVE-2026-120235 ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption CWE-400 4.3 Medium 2026-11-01
CVE-2026-120234 ag-ui-protocol ag-ui HTTP Transport e.text resource consumption CWE-400 4.3 Medium 2026-11-01
CVE-2026-120233 ag-ui-protocol ag-ui HttpAgent http.ts information disclosure CWE-200 5.3 Medium 2026-11-01
CVE-2026-101101 ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception CWE-248 4.3 Medium 2026-09-28
CVE-2026-101100 ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup CWE-459 5.4 Medium 2026-09-28
CVE-2026-101099 ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition CWE-755 4.3 Medium 2026-09-28
CVE-2026-101098 ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption CWE-400 4.3 Medium 2026-09-28
CVE-2026-92363 ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption CWE-400 4.3 Medium 2026-09-16
CVE-2026-92362 ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption CWE-400 7.3 High 2026-09-16
CVE-2026-92361 ag-ui-protocol ag-ui SSE Client client.go resource consumption CWE-400 4.3 Medium 2026-09-16
CVE-2026-92360 ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation CWE-346 6.3 Medium 2026-09-16
CVE-2026-92359 ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy CWE-942 3.1 Low 2026-09-16
CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery CWE-918 6.3 Medium 2026-09-15

All 15 known CVE vulnerabilities affecting ag-ui with full Chinese analysis, references, and POCs where available.