AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
LLM frameworks · AWS (open source)

Strands Agents

Open-source SDK from AWS for building AI agents in Python and TypeScript, including Agent2Agent (A2A) servers.

1Advisories
0critical
1high
0medium
2026-10-23Latest
Timeline · advisories per quarter
12026 Q4
Named in sources

Reported for Strands Agents

01. highData leakageNew this weekCVE-2026-115419: Strands Agents A2A servers shared conversation history between different callersThe Agent2Agent (A2A) server in AWS's Strands Agents SDK didn't isolate conversation state between callers with different context_id values. In a deployment used by more than one user or tenant, an authenticated caller could read another caller's conversation history or steer the model's answers to them. Fixed in strands-agents 1.43.0 (Python) and @strands-agents/sdk 1.5.0 (TypeScript). Strands Agents 2026-10-23
The weekly email

One email a week. Only what changed.

Every new security hole in AI coding tools, MCP servers, app builders and the stacks they generate (Next.js, Supabase, Node, PHP), each with how to check your app and the fix. No roundups of things you already read.

Free, one email a week. Read the latest issue first if you like. One-click unsubscribe in every email. We never sell or share addresses.