CVE-2026-92362

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui version 1.0

Description A remote manipulation of the SSE Frame Parser component within the file crates/ag-ui-client/src/sse.rs leads to excessive resource consumption. SSE (Server-Sent Events) is a mechanism that allows servers to push real-time updates to web pages over a single HTTP connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.