GHSA-5Q95-HRPC-M3W3 JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

Summary The JLine3 HISTORYIGNORE variable is converted into a Java regular expression with only partial escaping. As a result, regex metacharacters other than and : are passed through to the regex engine. A crafted value such as a++b can cause catastrophic backtracking each time a command line is...

PT-2026-97437

Name of the Vulnerable Software and Affected Versions JLine versions 3.0.0 through 3.30.14 JLine versions 4.x through 4.3.0 Description JLine is a Java library for handling console input. The matchPatternsString patterns, String line function in DefaultHistory.java converts the HISTORY IGNORE...