com.google.adk:google-adk-dev vulnerabilities

CVEs whose affected-version data names the com.google.adk:google-adk-dev package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107858High· 7.2

today

Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server

Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev …

▾ TwilightGoogle · com.google.adk:google-adk-devvia CVEORG