AG
Product
ag-ui
by ag-ui-protocol · last CVE Sep 28, 2026
10
CVEs
0
On KEV
7.3
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 8Low 1
Watch

Add ag-ui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92362
7.3
1%
Sep 16
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
Affected: 1.0
CVE-2026-92360
6.3
0%
Sep 16
ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation
Affected: 1.0
CVE-2026-92184
6.3
0%
Sep 15
ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
Affected: 0.3.0
CVE-2026-101100
5.4
0%
Sep 28
ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup
Affected: 2026-09-07
CVE-2026-101101
4.3
0%
Sep 28
ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception
Affected: 2026-09-07
CVE-2026-101099
4.3
0%
Sep 28
ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition
Affected: 2026-09-23
CVE-2026-101098
4.3
0%
Sep 28
ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption
Affected: 2026-09-23
CVE-2026-92363
4.3
1%
Sep 16
ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption
Affected: 1.0
CVE-2026-92361
4.3
1%
Sep 16
ag-ui-protocol ag-ui SSE Client client.go resource consumption
Affected: 1.0
CVE-2026-92359
3.1
0%
Sep 16
ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy
Affected: 0.3.0
Showing 10