Ag-ui-protocol
15 CVEs tracked since 2026. Since Sep 2026, none of them reached CISA KEV.
Ag-ui-protocol CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-09 | 10 | 0 |
| 2026-10 | 11 or fewer | |
| 2026-11 | 5 | 0 |
Products
The products that kept showing up in Ag-ui-protocol's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Ag-ui-protocol.
- CVE-2026-120237ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption4.3
- CVE-2026-120236ag-ui-protocol ag-ui Transport Decoder input validation6.3
- CVE-2026-120235ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption4.3
- CVE-2026-120234ag-ui-protocol ag-ui HTTP Transport e.text resource consumption4.3
- CVE-2026-120233ag-ui-protocol ag-ui HttpAgent http.ts information disclosure5.3
- CVE-2026-101101ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception4.3
- CVE-2026-101100ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup5.4
- CVE-2026-101099ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition4.3
- CVE-2026-101098ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption4.3
- CVE-2026-92363ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption4.3
- CVE-2026-92362ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption7.3
- CVE-2026-92361ag-ui-protocol ag-ui SSE Client client.go resource consumption4.3
- CVE-2026-92360ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation6.3
- CVE-2026-92359ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy3.1
- CVE-2026-92184ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery6.3
The record
- Peak rank
- #5 in Nov 2026
- Busiest month shown
- Sep 2026, 10 CVEs
- Months with a KEV entry
- 0 since Sep 2026
- Monthly snapshots
- 2 since 2026