A
Vendor security profile
ag-ui-protocol
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS5.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
10
0
CVE KEV
CVE severity distribution
10toplam CVE
Medium9 (90%)
Low1 (10%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
10Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
5.3
CVE-2026-101101
ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception
A
Patch verifiedEPSS %0
5.3
CVE-2026-101100
ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup
A
Patch verifiedEPSS %0
5.3
CVE-2026-101099
ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition
A
Patch verifiedEPSS %1
5.3
CVE-2026-101098
ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption
A
Patch verifiedEPSS %1
5.3
CVE-2026-92363
ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption
A
Patch verifiedEPSS %1
6.9
CVE-2026-92362
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
A
Patch verifiedEPSS %1
5.3
CVE-2026-92361
ag-ui-protocol ag-ui SSE Client client.go resource consumption
A
Patch verifiedEPSS %1
5.3
CVE-2026-92360
ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation
A
Patch verifiedEPSS %0
2.3
CVE-2026-92359
ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy
A
Patch verifiedEPSS %0
5.3
CVE-2026-92184
ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
A
Patch verifiedEPSS %0