CVE-2026-77420

A flaw was found in JLine, a Java library for handling console input. An attacker who can control application or user configuration can supply a specially crafted regular expression to the HISTORYIGNORE configuration variable. This malicious input can cause excessive CPU consumption when commands...

Regular Expression Denial Of Service (ReDoS)

JLine is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to incomplete escaping of regex metacharacters in the HISTORYIGNORE configuration, which allows an attacker to supply a malicious nested-quantifier expression that causes excessive CPU consumption and...

DEBIAN-CVE-2026-77420

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORYIGNORE configuration value into a Java regular expression...

GHSA-5Q95-HRPC-M3W3 JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

Summary The JLine3 HISTORYIGNORE variable is converted into a Java regular expression with only partial escaping. As a result, regex metacharacters other than and : are passed through to the regex engine. A crafted value such as a++b can cause catastrophic backtracking each time a command line is...

JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

Summary The JLine3 HISTORYIGNORE variable is converted into a Java regular expression with only partial escaping. As a result, regex metacharacters other than and : are passed through to the regex engine. A crafted value such as a++b can cause catastrophic backtracking each time a command line is...

CVE-2026-77420 JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORYIGNORE configuration value into a Java regular expression...

CVE-2026-77420 JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORYIGNORE configuration value into a Java regular expression...

CVE-2026-77420 JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORYIGNORE configuration value into a Java regular expression...