{"schema":"vulnpedia.research/1","cve":"CVE-2026-111764","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-qw47-mcm5-934w","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-qw47-mcm5-934w"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-20T16:15:50.172Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-qw47-mcm5-934w"},{"source":"nvd","sourceId":"CVE-2026-111764","modified":"2026-10-20T19:56:45.543","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-qw47-mcm5-934w"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-qw47-mcm5-934w"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-qw47-mcm5-934w"}]},{"url":"https://github.com/a2aproject/a2a-java/pull/1095","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","url":"https://github.com/a2aproject/a2a-java/pull/1095"},{"source":"nvd","sourceId":"CVE-2026-111764","modified":"2026-10-20T19:56:45.543","url":"https://github.com/a2aproject/a2a-java/pull/1095"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://github.com/a2aproject/a2a-java/pull/1095"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://github.com/a2aproject/a2a-java/pull/1095"}]},{"url":"https://github.com/a2aproject/a2a-java/commit/efb4e985e99390c4fc1f78c0a187a4254c0a2553","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","url":"https://github.com/a2aproject/a2a-java/commit/efb4e985e99390c4fc1f78c0a187a4254c0a2553"},{"source":"nvd","sourceId":"CVE-2026-111764","modified":"2026-10-20T19:56:45.543","url":"https://github.com/a2aproject/a2a-java/commit/efb4e985e99390c4fc1f78c0a187a4254c0a2553"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://github.com/a2aproject/a2a-java/commit/efb4e985e99390c4fc1f78c0a187a4254c0a2553"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://github.com/a2aproject/a2a-java/commit/efb4e985e99390c4fc1f78c0a187a4254c0a2553"}]},{"url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:05:26.905Z","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final"},{"source":"nvd","sourceId":"CVE-2026-111764","modified":"2026-10-20T19:56:45.543","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final"}]},{"url":"https://osv.dev/vulnerability/GHSA-qw47-mcm5-934w","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","origins":[{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://osv.dev/vulnerability/GHSA-qw47-mcm5-934w"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://osv.dev/vulnerability/GHSA-qw47-mcm5-934w"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111764","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","origins":[{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111764"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111764"}]},{"url":"https://github.com/a2aproject/a2a-java","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","origins":[{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://github.com/a2aproject/a2a-java"},{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://github.com/a2aproject/a2a-java"}]},{"source":"euvd","sourceId":"EUVD-2026-105130","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105130","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105130","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105130"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","url":"https://osv.dev/vulnerability/GHSA-qw47-mcm5-934w","ecosystem":"Maven","name":"org.a2aproject.sdk:a2a-java-sdk-server-common","purl":"pkg:maven/org.a2aproject.sdk/a2a-java-sdk-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0.Final"}]}],"versions":["1.0.0.Alpha4","1.0.0.Beta1","1.0.0.CR1","1.0.0.Final","1.1.0.Final","1.2.0.Final"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-qw47-mcm5-934w/GHSA-qw47-mcm5-934w.json"},"modified":"2026-10-20T21:15:04.046382128Z","origins":[{"source":"ghsa","sourceId":"GHSA-qw47-mcm5-934w","modified":"2026-10-20T21:15:04.046382128Z","url":"https://osv.dev/vulnerability/GHSA-qw47-mcm5-934w"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}