1 matches found
AZL-92450 CVE-2026-56740 affecting package jline 2.14.6-1
JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...
7.5CVSS5.9AI score0.00592EPSS
SaveExploits1References1
20