CLEANSTART-2026-ZH81930 JLine is a Java library for handling console input

Security vulnerability affects the elasticsearch package. JLine is a Java library for handling console input...

CLEANSTART-2026-KE95640 JLine is a Java library for handling console input

CVE-2026-77420 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

CLEANSTART-2026-YI14989 JLine is a Java library for handling console input

CVE-2026-77422 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

CLEANSTART-2026-JE20809 JLine is a Java library for handling console input

CVE-2026-77421 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2026-77421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a...

Linux Distros Unpatched Vulnerability : CVE-2026-77422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in...

grep jline-builtins module DoS

The vulnerability of the grep command in the jline-builtins Java library for processing console input in JLine is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-77420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in...

Linux Distros Unpatched Vulnerability : CVE-2026-77423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and...

SUSE CVE-2026-77420

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORYIGNORE configuration value into a Java regular expression...

SUSE CVE-2026-77421

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a user-controlled search term from doSearchString text in builtins/src/main/java/org/jline/builtins/Nano.java to Java's backtracking regular expression...

SUSE CVE-2026-77422

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...

SUSE CVE-2026-77423

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...

CVE-2026-77421

A flaw was found in the JLine built-in nano editor's regular expression regex search mode. A remote attacker could exploit this by providing a specially crafted search term. This could lead to excessive central processing unit CPU consumption, causing the editor session to become unresponsive and...

CVE-2026-77420

A flaw was found in JLine, a Java library for handling console input. An attacker who can control application or user configuration can supply a specially crafted regular expression to the HISTORYIGNORE configuration variable. This malicious input can cause excessive CPU consumption when commands...

Regular Expression Denial Of Service (ReDoS)

JLine is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to processing user-controlled regular expressions with Java's backtracking regex engine after adding a . prefix and suffix, which allows an attacker to trigger excessive CPU consumption and indefinitely...

Regular Expression Denial Of Service (ReDoS)

JLine is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to processing user-controlled search terms with Java's backtracking regular expression engine without execution or backtracking limits, which allows an attacker to trigger excessive CPU consumption and...

Regular Expression Denial Of Service (ReDoS)

JLine is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to incomplete escaping of regex metacharacters in the HISTORYIGNORE configuration, which allows an attacker to supply a malicious nested-quantifier expression that causes excessive CPU consumption and...

com.aspectran:aspectow-appmon-demo (3.2.0), com.aspectran:aspectran-all (>=9.4.3, <=9.6.2) +31 more potentially affected by CVE-2026-77421 via org.jline:jline-builtins (>=4.0.0, <=4.3.0)

org.jline:jline-builtins MAVEN version =4.0.0, =9.4.3, =9.4.3, =9.4.3, =2.54.0, =2.54.0, =2.54.0, =2.54.0, =2.54.0, =2.54.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.21.0 and more Source cves: CVE-2026-77421 Source advisory: SNYK:JAVA-ORGJLINE-20078913...

CVE-2026-77423

A flaw was found in JLine. The built-in less viewer processes user-controlled search and display-filter patterns using Java's backtracking regular expression engine. A remote attacker could provide a specially crafted regular expression, leading to excessive CPU consumption and indefinitely...