
Vulnerabilities
Android SDK flaw leaks auth headers via redirects in A2A Java client
A high severity vulnerability in the A2A Java SDK allows authentication credentials to leak to external hosts during synchronous POST requests.
Everything AppSec Scoop has reported about GitHub: 2 stories, newest first. Part of our Vulnerabilities coverage.

A high severity vulnerability in the A2A Java SDK allows authentication credentials to leak to external hosts during synchronous POST requests.

Terra Security reports a sharp rise in GitHub security fixes being bypassed within 90 days in 2026, complicating remediation efforts.