ROOT-APP-MAVEN-CVE-2026-56741 CVE-2026-56741 in org.jline:jline-remote-telnet - Patched by Root

Root has patched CVE-2026-56741 in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-56740 CVE-2026-56740 in org.jline:jline-remote-telnet - Patched by Root

Root has patched CVE-2026-56740 in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-GHSA-47QP-HQVX-6R3F GHSA-47qp-hqvx-6r3f in org.jline:jline-remote-telnet - Patched by Root

Root has patched GHSA-47qp-hqvx-6r3f in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-GHSA-2R2C-CX56-8933 GHSA-2r2c-cx56-8933 in org.jline:jline-remote-telnet - Patched by Root

Root has patched GHSA-2r2c-cx56-8933 in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

CVE-2026-56741

A flaw was found in the JLine3 Telnet server's remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by repeatedly sending large terminal dimension values through the Telnet Negotiate About Window Size NAWS option. This action triggers continuous,...

AZL-92450 CVE-2026-56740 affecting package jline 2.14.6-1

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

org.jline:jline-demo (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.0.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: MEND:CVE-2026-56740...

org.jline:jline (>=3.13.1, <=3.16.0), org.jline:jline-demo (>=3.18.0, <=3.30.13) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=3.13.1, <=3.30.13)

org.jline:jline-remote-telnet MAVEN version =3.13.1, =3.13.1, =3.18.0, =3.30.13 Source cves: CVE-2026-56740 Source advisory: MEND:CVE-2026-56740...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56741

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

org.jline:jline (>=3.13.1, <=3.16.0), org.jline:jline-demo (>=3.18.0, <=3.30.13) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=3.13.1, <=3.30.13)

org.jline:jline-remote-telnet MAVEN version =3.13.1, =3.13.1, =3.18.0, =3.30.13 Source cves: CVE-2026-56741 Source advisory: MEND:CVE-2026-56741...

org.jline:jline-demo (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=4.0.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.2.0 Source cves: CVE-2026-56741 Source advisory: MEND:CVE-2026-56741...

CVE-2026-56741: Uncontrolled Resource Consumption

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

CVE-2026-56740: Uncontrolled Resource Consumption

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

PT-2026-56863

Root has patched GHSA-47qp-hqvx-6r3f in the io.root.org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

PT-2026-56862

Root has patched GHSA-2r2c-cx56-8933 in the io.root.org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

org.jline:jline-demo (>=4.1.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.1.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: OSV:GHSA-47QP-HQVX-6R3F...

org.jline:jline-demo (>=4.1.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.1.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: GHSA-47QP-HQVX-6R3F...

org.jline:jline-demo (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.0.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: SNYK:JAVA-ORGJLINE-17391829...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via readNEVariables. An attacker can exhaust the JVM heap memory by sending a large number of unique Telnet NEW-ENVIRON variable pairs before the terminating IAC SE byte, resulting in...