| Title | a2aproject a2a-dotnet ≤ v1.0.0-preview2 CWE-209 |
|---|
| Description | A2AJsonRpcProcessor.ProcessRequestAsync caught JsonException and returned ParseErrorResponse(errorId, ex.Message), propagating the raw parser exception message to the client. System.Text.Json messages embed input paths, line numbers, byte positions, and library names, enabling server fingerprinting and information disclosure (CWE-209). |
|---|
| Source | ⚠️ https://github.com/a2aproject/a2a-dotnet/pull/452 |
|---|
| User | colorfullbz (UID 86308) |
|---|
| Submission | 10/06/2026 04:02 (23 days ago) |
|---|
| Moderation | 10/26/2026 11:59 (20 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 426390 [a2aproject a2a-dotnet up to 1.0.0-preview2 Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure] |
|---|
| Points | 19 |
|---|