Advisories · Technology
conductor.
Every CVE that names conductor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
- conductor
- Code injection