Advisories · Technology
ag-ui.
Every CVE that names ag-ui among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Transport Decoder input validation
- ag-ui
- CWE-20
- CVSS 5.3 Medium
ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui HTTP Transport e.text resource consumption
- ag-ui
- Denial of service
- CVSS 6.9 Medium
ag-ui-protocol ag-ui HttpAgent http.ts information disclosure
- ag-ui
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception
- ag-ui
- CWE-248
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup
- ag-ui
- CWE-459
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition
- ag-ui
- CWE-755
- CVSS 5.3 Medium
ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption
- ag-ui
- Denial of service
- CVSS 6.9 Medium
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui SSE Client client.go resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation
- ag-ui
- CWE-345
- CWE-346
- CVSS 2.3 Low
ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy
- ag-ui
- CWE-346
- CWE-942
- CVSS 5.3 Medium
ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
- ag-ui
- Server-side request forgery (SSRF)