| عنوان | a2aproject a2a-go ≤ v2.4.0 CWE-400 |
|---|
| الوصف | The REST SSE handler creates panicChan unbuffered, so a panic after the client disconnects is never read and the goroutine blocks forever on the send. A remote client can trigger this repeatedly by disconnecting while streaming, permanently consuming a goroutine and its stack each time, causing unbounded memory growth. |
|---|
| المصدر | ⚠️ https://github.com/a2aproject/a2a-go/pull/396 |
|---|
| المستخدم | colorfullbz (UID 86308) |
|---|
| ارسال | 06/10/2026 07:39 AM (22 أيام منذ) |
|---|
| الاعتدال | 27/10/2026 09:47 AM (21 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 427070 [a2aproject a2a-go حتى 2.4.0 REST SSE handler a2asrv/rest.go الحرمان من الخدمة] |
|---|
| النقاط | 18 |
|---|