{"schema":"vulnpedia.research/1","cve":"CVE-2026-108748","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@haind/quarkus-langchain4j-chatscope-orphan-leak","tags":["third-party-advisory","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","url":"https://hackmd.io/@haind/quarkus-langchain4j-chatscope-orphan-leak"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-13T19:45:41.159Z","url":"https://hackmd.io/@haind/quarkus-langchain4j-chatscope-orphan-leak"},{"source":"nvd","sourceId":"CVE-2026-108748","modified":"2026-10-16T17:25:57.940","url":"https://hackmd.io/@haind/quarkus-langchain4j-chatscope-orphan-leak"}]},{"url":"https://github.com/quarkiverse/quarkus-langchain4j/blob/658ac8268e1a453a6a2066952d9495fb925479e3/chat-scopes/websocket/runtime/src/main/java/io/quarkiverse/langchain4j/chatscopes/websocket/internal/ChatRouteEndpoint.java#L122-L160","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","url":"https://github.com/quarkiverse/quarkus-langchain4j/blob/658ac8268e1a453a6a2066952d9495fb925479e3/chat-scopes/websocket/runtime/src/main/java/io/quarkiverse/langchain4j/chatscopes/websocket/internal/ChatRouteEndpoint.java#L122-L160"},{"source":"nvd","sourceId":"CVE-2026-108748","modified":"2026-10-16T17:25:57.940","url":"https://github.com/quarkiverse/quarkus-langchain4j/blob/658ac8268e1a453a6a2066952d9495fb925479e3/chat-scopes/websocket/runtime/src/main/java/io/quarkiverse/langchain4j/chatscopes/websocket/internal/ChatRouteEndpoint.java#L122-L160"}]},{"url":"https://github.com/quarkiverse/quarkus-langchain4j/blob/658ac8268e1a453a6a2066952d9495fb925479e3/chat-scopes/core/runtime/src/main/java/io/quarkiverse/langchain4j/chatscopes/internal/ChatScopeManagedContext.java#L297-L311","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","url":"https://github.com/quarkiverse/quarkus-langchain4j/blob/658ac8268e1a453a6a2066952d9495fb925479e3/chat-scopes/core/runtime/src/main/java/io/quarkiverse/langchain4j/chatscopes/internal/ChatScopeManagedContext.java#L297-L311"},{"source":"nvd","sourceId":"CVE-2026-108748","modified":"2026-10-16T17:25:57.940","url":"https://github.com/quarkiverse/quarkus-langchain4j/blob/658ac8268e1a453a6a2066952d9495fb925479e3/chat-scopes/core/runtime/src/main/java/io/quarkiverse/langchain4j/chatscopes/internal/ChatScopeManagedContext.java#L297-L311"}]},{"url":"https://github.com/quarkiverse/quarkus-langchain4j","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","url":"https://github.com/quarkiverse/quarkus-langchain4j"},{"source":"nvd","sourceId":"CVE-2026-108748","modified":"2026-10-16T17:25:57.940","url":"https://github.com/quarkiverse/quarkus-langchain4j"}]},{"url":"https://www.vulncheck.com/advisories/quarkus-langchain4j-1.9.0-through-1.14.1-memory-exhaustion-via-chat-routes-websocket","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:49.295Z","url":"https://www.vulncheck.com/advisories/quarkus-langchain4j-1.9.0-through-1.14.1-memory-exhaustion-via-chat-routes-websocket"},{"source":"nvd","sourceId":"CVE-2026-108748","modified":"2026-10-16T17:25:57.940","url":"https://www.vulncheck.com/advisories/quarkus-langchain4j-1.9.0-through-1.14.1-memory-exhaustion-via-chat-routes-websocket"}]},{"source":"euvd","sourceId":"EUVD-2026-96913","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96913","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-96913","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96913"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}