CVE-2026-56741

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

SUSE-SU-2026:22562-1 Security update for jline3

This update for jline3 fixes the following issues: Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021...

OPENSUSE-SU-2026:21221-1 Security update for jline3

This update for jline3 fixes the following issues: Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021...

PT-2026-60677

This update for jline3 fixes the following issues: Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021...

PT-2026-60678

This update for jline3 fixes the following issues: Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:21221-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21221-1 advisory. Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021 Tenable has extracted the preceding...

Security update for jline3 (moderate)

openSUSE security update: security update for jline3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21221-1 Rating: moderate References: bsc1269021 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- ...

GHSA-47QP-HQVX-6R3F JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Summary The JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option. An unauthenticated attacker can flood the server with a large number of unique variable pairs before sending the terminating IAC SE byte,...

jline3:LineReaderFuzzer: Security exception in java.base/java.util.stream.SpinedBuffer$OfInt.newArray

Detailed Report: https://oss-fuzz.com/testcase?key=4823741736747008 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jline3:LineReaderFuzzer: Security exception in java.base/java.util.stream.SpinedBuffer$OfInt.newArray

Detailed Report: https://oss-fuzz.com/testcase?key=4734468870176768 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jline3:LineReaderFuzzer: Security exception in java.base/java.util.stream.Nodes$IntArrayNode.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=6493265308024832 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.stream.Nodes$IntArrayNode...

jline3:LineReaderFuzzer: Security exception in java.base/java.util.stream.SpinedBuffer$OfInt.newArray

Detailed Report: https://oss-fuzz.com/testcase?key=4846311869120512 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jline3:LineReaderFuzzer: Security exception in java.base/java.util.stream.SpinedBuffer$OfInt.newArray

Project: https://github.com/jline/jline3.git Detailed Report: https://oss-fuzz.com/testcase?key=5934431750455296 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jline3:LineReaderFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745699963404288 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended Security...

jline3:LineReaderFuzzer: Security exception in java.base/java.util.stream.SpinedBuffer$OfInt.newArray

Project: https://github.com/jline/jline3.git Detailed Report: https://oss-fuzz.com/testcase?key=6297231302197248 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jline3:LineReaderFuzzer: Security exception in java.base/java.lang.Object.clone

Detailed Report: https://oss-fuzz.com/testcase?key=4671743014076416 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.Object.clone...

jline3:LineReaderFuzzer: Security exception in org.jline.reader.impl.DefaultParser.isEscapeChar

Detailed Report: https://oss-fuzz.com/testcase?key=4811195334131712 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.jline.reader.impl.DefaultParser.isEscapeChar...

jline3:LineReaderFuzzer: Security exception in org.jline.reader.impl.BufferImpl.write

Project: https://github.com/jline/jline3.git Detailed Report: https://oss-fuzz.com/testcase?key=5771529326821376 Project: jline3 Fuzzing Engine: libFuzzer Fuzz Target: LineReaderFuzzer Job Type: libfuzzerasanjline3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...