{"schema":"vulnpedia.research/1","cve":"CVE-2026-111765","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-22T21:32:18.921Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg"}]},{"url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx"}]},{"url":"https://github.com/a2aproject/a2a-java/pull/1141","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/pull/1141"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/pull/1141"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/pull/1141"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/pull/1141"}]},{"url":"https://github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e"}]},{"url":"https://github.com/a2aproject/a2a-java/commit/3ae82912a106a6765d7b78042b0ef96e6c2e29b5","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/commit/3ae82912a106a6765d7b78042b0ef96e6c2e29b5"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/commit/3ae82912a106a6765d7b78042b0ef96e6c2e29b5"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/commit/3ae82912a106a6765d7b78042b0ef96e6c2e29b5"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/commit/3ae82912a106a6765d7b78042b0ef96e6c2e29b5"}]},{"url":"https://github.com/a2aproject/a2a-java/blob/30e31086e24bea096b5f662088661269c9119100/SECURITY.md#L335-L342","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/blob/30e31086e24bea096b5f662088661269c9119100/SECURITY.md#L335-L342"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/blob/30e31086e24bea096b5f662088661269c9119100/SECURITY.md#L335-L342"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/blob/30e31086e24bea096b5f662088661269c9119100/SECURITY.md#L335-L342"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/blob/30e31086e24bea096b5f662088661269c9119100/SECURITY.md#L335-L342"}]},{"url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.2.Final","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T15:10:51.321Z","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.2.Final"},{"source":"nvd","sourceId":"CVE-2026-111765","modified":"2026-10-22T22:18:01.380","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.2.Final"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.2.Final"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java/releases/tag/v1.3.2.Final"}]},{"url":"https://osv.dev/vulnerability/GHSA-4fpj-g9jf-9rgg","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","origins":[{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://osv.dev/vulnerability/GHSA-4fpj-g9jf-9rgg"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://osv.dev/vulnerability/GHSA-4fpj-g9jf-9rgg"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111765","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","origins":[{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111765"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111765"}]},{"url":"https://github.com/a2aproject/a2a-java","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","origins":[{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://github.com/a2aproject/a2a-java"},{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://github.com/a2aproject/a2a-java"}]},{"source":"euvd","sourceId":"EUVD-2026-105136","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105136","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105136","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105136"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","url":"https://osv.dev/vulnerability/GHSA-4fpj-g9jf-9rgg","ecosystem":"Maven","name":"org.a2aproject.sdk:a2a-java-sdk-http-client-android","purl":"pkg:maven/org.a2aproject.sdk/a2a-java-sdk-http-client-android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0.Final"},{"fixed":"1.3.2.Final"}]}],"versions":["1.3.0.Final","1.3.1.Final"],"databaseSpecific":{"last_known_affected_version_range":"<= 1.3.1.Final","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4fpj-g9jf-9rgg/GHSA-4fpj-g9jf-9rgg.json"},"modified":"2026-10-21T03:11:56.305391879Z","origins":[{"source":"ghsa","sourceId":"GHSA-4fpj-g9jf-9rgg","modified":"2026-10-21T03:11:56.305391879Z","url":"https://osv.dev/vulnerability/GHSA-4fpj-g9jf-9rgg"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}