CO
Vendor
conductor-oss
6
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109405 | CO conductor conductor-oss | 7.3 | Oct 13 | conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery |
| CVE-2026-109404 | CO conductor conductor-oss | 5.3 | Oct 13 | conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery |
| CVE-2026-109403 | CO conductor conductor-oss | 7.3 | Oct 13 | conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery |
| CVE-2026-109402 | CO conductor conductor-oss | 6.3 | Oct 13 | conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery |
| CVE-2026-109190 | CO conductor conductor-oss | 6.3 | Oct 13 | conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery |
| CVE-2026-58138 | CO conductor conductor-oss | 9.8 | Jun 30 | Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators |
