Skip to content
OpenAdvisories

Package · Debian

jline

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2026-56740

    JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

    JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readN…

    jline jline3 jline3 jline2 Debian Ubuntu Maven
  • High 7.5
    CVE-2026-56741

    JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

    JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS() in Telne…

    jline jline3 jline3 jline3 Debian Ubuntu Maven