CVE-2026-77420Published
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-77420 · Microsoft / collected KEV context
cve-program · CVE-2026-77420
- https://github.com/jline/jline3/security/advisories/GHSA-5q95-hrpc-m3w3
- https://github.com/jline/jline3/pull/2012
- https://github.com/jline/jline3/pull/2018
- https://github.com/jline/jline3/commit/1d5fc3099e77938b971e197211cad2d4fbb17541
- https://github.com/jline/jline3/commit/341ee69ccc57b7733c1b40d6993219b64b3206ae
- https://github.com/jline/jline3/releases/tag/4.3.1
- https://github.com/jline/jline3/releases/tag/jline-3.30.15
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.