pypi package report

Is python-a2a safe?

1 known vulnerability, worst severity MODERATE.

cvss
5.1

how bad it is if exploited, out of 10

epss
0.90%

chance of exploitation in the next 30 days

xyz score
not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-rp38-pj7h-r8q2, the advisory selected below

// advisories

GHSA-rp38-pj7h-r8q2

MODERATECVE-2025-6167

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommended to upgrade the affected component.

Affected
< 0.5.6
Fixed in
0.5.6
Weakness
CWE-22
Published
2025-06-17
Source
github

GHSANVDMITREreferencereferencereferencereferencereferencereferencereference

// dependencies

0 direct

Sign in for dependency paths and remediation

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 01:30 UTC. The most recent advisory here was published 2025-06-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is python-a2a safe? pypi package security report | CyberXYZ