C
Vendor security profile
conductor-oss
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
5toplam CVE
Medium5 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%20
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.9
CVE-2026-109405
conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery
C
Patch status unknown
6.9
CVE-2026-109404
conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery
C
Patch status unknown
6.9
CVE-2026-109403
conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery
C
Patch status unknown
5.3
CVE-2026-109402
conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery
C
Patch status unknown
5.3
CVE-2026-109190
conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery
C
Patch status unknown