Skip to content
OpenAdvisories

Vendor

jline

6 known vulnerabilities.

jline at a glance

Last 12 months
6
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities August 2026: 0 vulnerabilities September 2026: 4 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202640
Aug 202600
Jul 202620
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

jline3 6
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 7.5
    CVE-2026-77423

    JLine: ReDoS in Built-in Less Viewer Search

    JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPattern(boolean doDisplayPattern) in builtins/src/main/java/org/jline/buil…

    jline jline3 jline3 jline3 Debian Ubuntu
  • Medium 5.5
    CVE-2026-77420

    JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

    JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatterns(String patterns, String line) in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORY_IGNORE configurat…

    jline jline3 jline3 jline Debian Ubuntu Maven
  • High 7.5
    CVE-2026-77422

    JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping

    JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep(...) and, unless line-…

    jline jline3 jline3 jline3 Debian Ubuntu Maven
  • Medium 6.5
    CVE-2026-77421

    JLine: ReDoS in Nano Editor Regex Search Mode

    JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a user-controlled search term from doSearch(String text) in builtins/src/main/java/org/jline/builtins/Nano.java t…

    jline jline3 jline3 jline Debian Ubuntu Maven
  • High 7.5
    CVE-2026-56740

    JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

    JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readN…

    jline jline3 jline3 jline2 Debian Ubuntu Maven
  • High 7.5
    CVE-2026-56741

    JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

    JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS() in Telne…

    jline jline3 jline3 jline3 Debian Ubuntu Maven