| 제목 | a2aproject a2a-java ≤ 1.2.0.Final CWE-400 |
|---|
| 설명 | ChildQueue builds a LinkedBlockingDeque without a capacity, so queue.offer() always returns true and the "queue is full" close path is dead code. A subscriber that stops consuming causes the deque to grow without limit while events keep being appended, and the queue is never closed. Because the growth is driven purely by the arrival of task events rather than by the subscriber, a single client that opens a subscription and then stops reading is enough to exhaust server memory over time, without needing concurrent requests or elevated privileges. |
|---|
| 원천 | ⚠️ https://github.com/a2aproject/a2a-java/pull/1040 |
|---|
| 사용자 | colorfullbz (UID 86308) |
|---|
| 제출 | 2026. 10. 06. AM 07:45 (22 날 ago) |
|---|
| 모더레이션 | 2026. 10. 27. AM 09:47 (21 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 427072 [a2aproject a2a-java 까지 1.2.0.Final ChildQueue queue.offer 서비스 거부] |
|---|
| 포인트들 | 20 |
|---|