CVE-2026-77422
1 advisory.
Maven/org.jline:jline-builtins CVE-2026-77422: high 7.5, EPSS 0.50%
JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
Action: Upgrade org.jline:jline-builtins to 3.30.15 (3.x) or 4.3.1 (4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.3.1 | - |
| 3.0.0 | 3.30.15 | - |
Fixed versions
| 4.3.1 | 3.30.15 |
Sources
- osv: GHSA-r2xf-8xr9-62gw
- https://github.com/jline/jline3/security/advisories/GHSA-r2xf-8xr9-62gw
- https://github.com/jline/jline3/pull/2012
- https://github.com/jline/jline3/pull/2018
- https://github.com/jline/jline3/commit/1d5fc3099e77938b971e197211cad2d4fbb17541
- https://github.com/jline/jline3/commit/341ee69ccc57b7733c1b40d6993219b64b3206ae
- https://github.com/jline/jline3
- https://github.com/jline/jline3/releases/tag/4.3.1
- https://github.com/jline/jline3/releases/tag/jline-3.30.15
CVE-2026-77422 · published · modified · JSON