jline jline3
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-77423 | >= 3.0.0, < 3.30.15 ; >= 4.0.0, < 4.3.1 | JLine: ReDoS in Built-in Less Viewer Search | HIGH 7.5 | 0.5 % | ||
| CVE-2026-77420 | >= 3.0.0, < 3.30.15 ; >= 4.0.0, < 4.3.1 | JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-77422 | >= 3.0.0, < 3.30.15 ; >= 4.0.0, < 4.3.1 | JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping | HIGH 7.5 | 0.6 % | ||
| CVE-2026-77421 | >= 3.0.0, < 3.30.15 ; >= 4.0.0, < 4.3.1 | JLine: ReDoS in Nano Editor Regex Search Mode | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-56740 | < 3.30.14 ; >= 4.0.0, < 4.0.16 ; >= 4.1.0, < 4.2.1 | JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables | HIGH 7.5 | 0.6 % | ||
| CVE-2026-56741 | < 3.30.14 ; >= 4.0.0, < 4.0.16 ; >= 4.1.0, < 4.2.1 | JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry | HIGH 7.5 | 0.6 % |