Jline

7 CVEs across 2 Jline products. Browse Jline vulnerabilities, severities, and proof-of-concept exploits.

Jline products with known CVEs

ProductCVEs
Jline36
Jline3
Jline CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-77423High7.52026-09-23JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and displa…
CVE-2026-77422High7.52026-09-23JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/bui…
CVE-2026-77421Medium6.52026-09-23JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a user-contro…
CVE-2026-77420Medium5.52026-09-23JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatterns(String patterns, String line) in reader/sr…
CVE-2026-56741High7.52026-07-17JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper…
CVE-2026-56740High7.52026-07-17JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the numbe…
CVE-2023-50572Medium5.52023-12-29An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.