CVE-2026-77420
MediumAdvisory
Published 23 Sept 2026In the index since 24 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 166
- of 17,837 indexed, latest versions
- Container images
- 146
- deployed by those charts
- Fix available
- 1 of 1
- affected package
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
Carried by container images the latest versions of 166 of 17,837 indexed charts deploy, on 146 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jline-readermaven | 3.8.2, 3.9.0, 3.12.1, 3.13.1+19 more | 3.30.15, 4.3.1 | 146 |
- OSV records
- GHSA-5q95-hrpc-m3w3
- Trending
- Rank 43 in indexed charts, since 24 Sept 2026. See the ranking →
Charts affected
166 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zookeeperquench-zookeeperVerified publisher | 0.0.15 | 1 of 1See more | 33 |
| radar-cp-ksql-serverradar-baseVerified publisher | 0.0.2 | 1 of 2See more | 5,427 |
| sonarquberedhat-cop | 0.1.13 | 1 of 1See more | 4,388 |
| sonatype-nexus3simcube | 1.0.1 | 1 of 2See more | 4,869 |
| stewardsoftwaremillVerified publisher | 0.1.12 | 1 of 1See more | 428 |
| hazelcaststakaterVerified publisher | 1.0.2 | 1 of 1See more | 1,708 |
| trinostatcan | 1.23.4 | 1 of 2See more | 14,024 |
| hadoop-deploymenttejaswita-hadoop-helmchart | 1.0.0 | 1 of 1See more | 4,265 |
| kafkatwomartensVerified publisher | 0.2.1 | 1 of 2See more | 1,271 |
| zookeepertwomartensVerified publisher | 0.2.2 | 1 of 1See more | 1,781 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 5,648 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,469 |
| hazelcastwener | 5.10.3 | 1 of 2See more | 2,765 |
| hazelcastwenerme | 5.10.3 | 1 of 2See more | 2,813 |
| elasticsearchwiremindVerified publisher | 8.19.0 | 1 of 1See more | 2,315 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,550 |
Container images carrying it
146 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | b6e381ffd6ae | jline-reader | 3.30.15 | 1 |
| bitnamilegacy/ | d8440eb6b290 | jline-reader | 3.30.15 | 1 |
| ckan/ | ef8e5d3e6be1 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 24cdd3a7fa89 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 3bf359d5e340 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 5e8f3ab5b497 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 83dbca3efd2a | jline-reader | 3.30.15 | 1 |
| confluentinc/ | adc392d28a1e | jline-reader | 3.30.15 | 1 |
| confluentinc/ | c0224a1adf7a | jline-reader | 3.30.15 | 1 |
| confluentinc/ | dc9b972db002 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 118cec1c87e2 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 8ec46c27982f | jline-reader | 3.30.15 | 1 |
| confluentinc/ | ee403d5b9090 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 0bec03c1f3ce | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 5ca5f3269814 | jline-reader | 3.30.15 | 1 |
| confluentinc/ | 1a3266adff1a | jline-reader | 3.30.15 | 1 |
| dremio/ | 80ed2e3b7c43 | jline-reader | 3.30.15 | 1 |
| empathyco/ | 03e724e41eeb | jline-reader | 3.30.15 | 1 |
| fthomas/ | a8eb43927576 | jline-reader | 3.30.15 | 1 |
| gchq/ | c460bb587d6d | jline-reader | 3.30.15 | 1 |
| graylog/ | 8a1f641cd7aa | jline-reader | 3.30.15 | 1 |
| gridgain/ | 95018390077b | jline-reader | 3.30.15 | 1 |
| hazelcast/ | 8fe26efde8e1 | jline-reader | 3.30.15 | 1 |
| hazelcast/ | f086bf0ecb23 | jline-reader | 3.30.15 | 1 |
| hazelcast/ | 20be7743a9c7 | jline-reader | 3.30.15 | 1 |
| hazelcast/ | a825ecbe9fda | jline-reader | 3.30.15 | 1 |
| hivemq/ | 4d194450d48e | jline-reader | 3.30.15 | 1 |
| ibmcom/ | e31ff09e8aad | jline-reader | 3.30.15 | 1 |
| kafkace/ | 7adc206bf5a4 | jline-reader | 3.30.15 | 1 |
| kafkakraft/ | 062d697db7e5 | jline-reader | 3.30.15 | 1 |
| kafkakraft/ | f261ad288fce | jline-reader | 3.30.15 | 1 |
| kafkakraft/ | 2e4b593b878b | jline-reader | 3.30.15 | 1 |
| library/ | 2cc40b15dff8 | jline-reader | 3.30.15 | 1 |
| library/ | 310b9fc03b06 | jline-reader | 3.30.15 | 1 |
| library/ | 332c6d416808 | jline-reader | 3.30.15 | 1 |
| library/ | 88c2ec10c7f2 | jline-reader | 3.30.15 | 1 |
| library/ | 8d09295845fe | jline-reader | 3.30.15 | 1 |
| library/ | 8d5fd89230d7 | jline-reader | 3.30.15 | 1 |
| library/ | 9656a9ca03f8 | jline-reader | 3.30.15 | 1 |
| library/ | fdc73b3249c1 | jline-reader | 3.30.15 | 1 |
| library/ | 1fe4fb22a2a5 | jline-reader | 3.30.15 | 1 |
| library/ | 2caf944aa4a5 | jline-reader | 3.30.15 | 1 |
| library/ | 3c9fea42bd5a | jline-reader | 3.30.15 | 1 |
| library/ | 5ab4ab0358cf | jline-reader | 3.30.15 | 1 |
| library/ | 6c162e2432f8 | jline-reader | 3.30.15 | 1 |
| library/ | 8f01f7bb053e | jline-reader | 3.30.15 | 1 |
| library/ | 0842dcd4c8f8 | jline-reader | 3.30.15 | 1 |
| library/ | 7e43ff493a47 | jline-reader | 3.30.15 | 1 |
| library/ | 88cd63154d4b | jline-reader | 3.30.15 | 1 |
| library/ | a9bc5a3a1fc3 | jline-reader | 3.30.15 | 1 |