{"schema":"vulnpedia.research/1","cve":"CVE-2026-108395","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/modelcontextprotocol/java-sdk/security/advisories/GHSA-4x8c-5vv7-973f","tags":["x_refsource_CONFIRM"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/security/advisories/GHSA-4x8c-5vv7-973f"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/security/advisories/GHSA-4x8c-5vv7-973f"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/1499df22c7023aa257223143a5dcf5b1db7ef80d","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/commit/1499df22c7023aa257223143a5dcf5b1db7ef80d"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/commit/1499df22c7023aa257223143a5dcf5b1db7ef80d"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/6a41dedaa0625551582d8247e5a4d78eae1131b2","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/commit/6a41dedaa0625551582d8247e5a4d78eae1131b2"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/commit/6a41dedaa0625551582d8247e5a4d78eae1131b2"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/8c0fdd1b1f76adba3ce7945d29f73fa2ddc66598","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/commit/8c0fdd1b1f76adba3ce7945d29f73fa2ddc66598"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/commit/8c0fdd1b1f76adba3ce7945d29f73fa2ddc66598"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/9e4d5fa827b6ba69457f5fd93573184789528efa","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/commit/9e4d5fa827b6ba69457f5fd93573184789528efa"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/commit/9e4d5fa827b6ba69457f5fd93573184789528efa"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v0.18.4","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v0.18.4"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v0.18.4"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v1.1.4","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v1.1.4"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v1.1.4"}]},{"url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v2.0.1","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:46:23.760Z","url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v2.0.1"},{"source":"nvd","sourceId":"CVE-2026-108395","modified":"2026-10-16T16:00:33.533","url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v2.0.1"}]},{"source":"euvd","sourceId":"EUVD-2026-101503","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101503","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101503","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101503"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}