To report a security issue, please use GitHub Security Advisories: Security Advisories · a2aproject/A2A

We use GitHub Security Advisories for private intake, coordination, and disclosure.