StackRadar

CVE-2026-77420

Medium

Advisory

Published 23 Sept 2026In the index since 24 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
166
of 17,837 indexed, latest versions
Container images
146
deployed by those charts
Fix available
1 of 1
affected package

JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

Carried by container images the latest versions of 166 of 17,837 indexed charts deploy, on 146 images.

Affected packageAffected versionsFixed inImages
jline-readermaven3.8.2, 3.9.0, 3.12.1, 3.13.1+19 more3.30.15, 4.3.1146
OSV records
GHSA-5q95-hrpc-m3w3
Trending
Rank 43 in indexed charts, since 24 Sept 2026. See the ranking →

Charts affected

166 by stars
ChartLatestAffected imagesRadar Score
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
jline-reader@3.29.0
3.30.15

Open the chart page →

3,320
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
jline-reader@3.16.0
3.30.15

Open the chart page →

6,124
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jline-reader@3.9.0
3.30.15

Open the chart page →

10,568
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-reader@3.12.1
3.30.15

Open the chart page →

12,679
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-reader@3.12.1
3.30.15

Open the chart page →

4,579
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-reader@3.12.1
3.30.15

Open the chart page →

5,606
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-reader@3.12.1
3.30.15

Open the chart page →

4,579
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
jline-reader@3.9.0
3.30.15

Open the chart page →

9,431
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
jline-reader@3.9.0
3.30.15
library/zookeeper:3.9.57d0f24ebb67b
jline-reader@3.25.1
3.30.15

Open the chart page →

8,317
elasticsearchhelmforgeVerified publisher1.1.81 of 2See more

elasticsearch helmforge 1.1.8

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.38d09295845fe
jline-reader@3.21.0
3.30.15

Open the chart page →

333
kibanahelmforgeVerified publisher1.1.81 of 3See more

kibana helmforge 1.1.8

1 of the 3 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.19656a9ca03f8
jline-reader@3.21.0
3.30.15

Open the chart page →

394
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/zookeeper:3.9.57d0f24ebb67b
jline-reader@3.25.1
3.30.15

Open the chart page →

3,058
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.3.2798cf28e226a
jline-reader@3.21.0
3.30.15

Open the chart page →

25,725
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
jline-reader@3.21.0
3.30.15

Open the chart page →

4,531
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
jline-reader@3.9.0
3.30.15

Open the chart page →

39,461
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
jline-reader@3.9.0
3.30.15

Open the chart page →

111,245
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
jline-reader@3.25.1
3.30.15

Open the chart page →

5,494
neo4jinseefrlab3.2.01 of 1See more

neo4j inseefrlab 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/neo4j:4.4.43c9fea42bd5a
jline-reader@3.20.0
3.30.15

Open the chart page →

2,141
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
jline-reader@3.21.0
3.30.15

Open the chart page →

2,677
daveit-at-mOfficialVerified publisher0.2.171 of 9See more

dave it-at-m 0.2.17

1 of the 9 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jline-reader@3.21.0
3.30.15

Open the chart page →

12,668
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jline-reader@3.14.1
3.30.15

Open the chart page →

12,945
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jline-reader@3.21.0
3.30.15

Open the chart page →

65,011
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
jline-reader@3.21.0
3.30.15

Open the chart page →

7,848
efklovemew67Verified publisher0.0.11 of 2See more

efk lovemew67 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
nshou/elasticsearch-kibana:kibana7a1d1e36814d1
jline-reader@3.14.1
3.30.15

Open the chart page →

3,776
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
jline-reader@3.21.0
3.30.15

Open the chart page →

4,429
streamsmicroslacVerified publisher0.1.04 of 6See more

streams microslac 0.1.0

4 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.024cdd3a7fa89
jline-reader@3.22.0
3.30.15
confluentinc/cp-ksqldb-cli:7.6.0118cec1c87e2
jline-reader@3.13.1
3.30.15
confluentinc/ksqldb-server:latest1a3266adff1a
jline-reader@3.13.1
3.30.15
microslac/kafka-connect:latesta90091a1f524
jline-reader@3.22.0
3.30.15

Open the chart page →

20,046
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-reader@3.21.0
3.30.15

Open the chart page →

11,922
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-reader@3.21.0
3.30.15

Open the chart page →

11,922
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-reader@3.21.0
3.30.15

Open the chart page →

12,337
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jline-reader@3.12.1
3.30.15

Open the chart page →

16,397
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-reader@3.21.0
3.30.15

Open the chart page →

11,706
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-reader@3.21.0
3.30.15

Open the chart page →

19,483
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jline-reader@3.21.0
3.30.15

Open the chart page →

31,055
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
jline-reader@3.12.1
3.30.15

Open the chart page →

99,052
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
jline-reader@3.12.1
3.30.15

Open the chart page →

16,046
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jline-reader@3.14.1
3.30.15

Open the chart page →

9,454
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-reader@3.12.1
3.30.15

Open the chart page →

4,579
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jline-reader@3.9.0
3.30.15

Open the chart page →

8,571
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
jline-reader@3.21.0
3.30.15

Open the chart page →

9,424
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jline-reader@3.13.2
3.30.15

Open the chart page →

13,044
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
jline-reader@3.19.0
3.30.15

Open the chart page →

41,446
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
jline-reader@3.30.6
3.30.15

Open the chart page →

2,163
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
jline-reader@3.21.0
3.30.15

Open the chart page →

1,303
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
jline-reader@3.21.0
3.30.15

Open the chart page →

201,333
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
jline-reader@3.21.0
3.30.15

Open the chart page →

1,300
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jline-reader@3.9.0
3.30.15

Open the chart page →

2,021
kafkaquench-kafkaVerified publisher0.0.171 of 1See more

kafka quench-kafka 0.0.17

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kafkadigest-pinned1fd1397ae1f7
jline-reader@4.2.1
4.3.1

Open the chart page →

33
neo4jquench-neo4jVerified publisher0.0.161 of 1See more

neo4j quench-neo4j 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/neo4jdigest-pinnedab430bcc8ec5
jline-reader@3.21.0
3.30.15

Open the chart page →

19
opensearchquench-opensearchVerified publisher0.1.61 of 1See more

opensearch quench-opensearch 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/opensearchdigest-pinned03e845cab860
jline-reader@3.21.0
3.30.15

Open the chart page →

33
pulsarquench-pulsarVerified publisher0.0.181 of 1See more

pulsar quench-pulsar 0.0.18

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/pulsardigest-pinned5bd32914943e
jline-reader@4.2.1
4.3.1

Open the chart page →

59

Container images carrying it

146 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jline-reader@3.12.1
3.30.15
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
jline-reader@3.21.0
3.30.15
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
jline-reader@3.9.0
3.30.15
1
confluentinc/cp-kafka:7.6.024cdd3a7fa89
jline-reader@3.22.0
3.30.15
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
jline-reader@3.12.1
3.30.15
1
confluentinc/cp-kafka:latest5e8f3ab5b497
jline-reader@3.30.4
3.30.15
1
confluentinc/cp-kafka:7.6.683dbca3efd2a
jline-reader@3.25.1
3.30.15
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
jline-reader@3.25.1
3.30.15
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
jline-reader@3.22.0
3.30.15
1
confluentinc/cp-kafka:7.5.1dc9b972db002
jline-reader@3.22.0
3.30.15
1
confluentinc/cp-ksqldb-cli:7.6.0118cec1c87e2
jline-reader@3.13.1
3.30.15
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jline-reader@3.13.1
3.30.15
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jline-reader@3.13.1
3.30.15
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
jline-reader@3.22.0
3.30.15
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
jline-reader@3.25.1
3.30.15
1
confluentinc/ksqldb-server:latest1a3266adff1a
jline-reader@3.13.1
3.30.15
1
dremio/dremio-oss:24.1.080ed2e3b7c43
jline-reader@3.9.0
3.30.15
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
jline-reader@3.14.1
3.30.15
1
fthomas/scala-steward:latesta8eb43927576
jline-reader@3.29.0
3.30.15
1
gchq/accumulo:2.0.1c460bb587d6d
jline-reader@3.9.0
3.30.15
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jline-reader@3.9.0
3.30.15
1
gridgain/gridgain9:9.1.1895018390077b
jline-reader@3.29.0
3.30.15
1
hazelcast/hazelcast:5.3.18fe26efde8e1
jline-reader@3.23.0
3.30.15
1
hazelcast/hazelcast:latestf086bf0ecb23
jline-reader@3.30.9
3.30.15
1
hazelcast/hazelcast-enterprise:5.7.120be7743a9c7
jline-reader@3.30.9
3.30.15
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
jline-reader@3.16.0
3.30.15
1
hivemq/hivemq4:dns-4.5.144d194450d48e
jline-reader@3.21.0
3.30.15
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
jline-reader@3.9.0
3.30.15
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jline-reader@3.25.1
3.30.15
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
jline-reader@3.22.0
3.30.15
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
jline-reader@3.22.0
3.30.15
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
jline-reader@3.22.0
3.30.15
1
library/elasticsearch:8.17.32cc40b15dff8
jline-reader@3.21.0
3.30.15
1
library/elasticsearch:8.15.0310b9fc03b06
jline-reader@3.21.0
3.30.15
1
library/elasticsearch:7.17.0332c6d416808
jline-reader@3.14.1
3.30.15
1
library/elasticsearch:7.17.1588c2ec10c7f2
jline-reader@3.14.1
3.30.15
1
library/elasticsearch:9.5.38d09295845fe
jline-reader@3.21.0
3.30.15
1
library/elasticsearch:7.16.18d5fd89230d7
jline-reader@3.14.1
3.30.15
1
library/elasticsearch:9.5.19656a9ca03f8
jline-reader@3.21.0
3.30.15
1
library/elasticsearch:7.17.8fdc73b3249c1
jline-reader@3.14.1
3.30.15
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
jline-reader@3.9.0
3.30.15
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jline-reader@3.21.0
3.30.15
1
library/neo4j:4.4.43c9fea42bd5a
jline-reader@3.20.0
3.30.15
1
library/neo4j:2026.02.25ab4ab0358cf
jline-reader@3.21.0
3.30.15
1
library/neo4j:2026.05.06c162e2432f8
jline-reader@3.21.0
3.30.15
1
library/neo4j:5.18.18f01f7bb053e
jline-reader@3.21.0
3.30.15
1
library/sonarqube:10.7.0-community0842dcd4c8f8
jline-reader@3.21.0
3.30.15
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
jline-reader@3.14.1
3.30.15
1
library/sonarqube:8.9.2-community88cd63154d4b
jline-reader@3.14.1
3.30.15
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
jline-reader@3.14.1
3.30.15
1

syft 1.42.1 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.