Skip to content

Product

redhat/jline-reader vulnerabilities

2 published CVES affecting redhat/jline-reader, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest redhat/jline-reader CVEs

Newest publication first

  1. CVE-2026-77420 JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

    Published
    MediumCVSS 5.5 EPSS 0.18%

    JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatterns(String patterns, String line) in reader/src/main/java/org/jline/reader/impl/history/DefaultHistory.java converts the HISTORY_IGNORE configuration value into a Java...

  2. CVE-2026-77421 JLine: ReDoS in Nano Editor Regex Search Mode

    Published
    MediumCVSS 6.5 EPSS 0.43%

    JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a user-controlled search term from doSearch(String text) in builtins/src/main/java/org/jline/builtins/Nano.java to Java's backtracking...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.