StackRadar

CVE-2026-77420

Medium

Advisory

Published 23 Sept 2026In the index since 24 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
166
of 17,837 indexed, latest versions
Container images
146
deployed by those charts
Fix available
1 of 1
affected package

JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

Carried by container images the latest versions of 166 of 17,837 indexed charts deploy, on 146 images.

Affected packageAffected versionsFixed inImages
jline-readermaven3.8.2, 3.9.0, 3.12.1, 3.13.1+19 more3.30.15, 4.3.1146
OSV records
GHSA-5q95-hrpc-m3w3
Trending
Rank 43 in indexed charts, since 24 Sept 2026. See the ranking →

Charts affected

166 by stars
ChartLatestAffected imagesRadar Score
zookeeperquench-zookeeperVerified publisher0.0.151 of 1See more

zookeeper quench-zookeeper 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/zookeeperdigest-pinned72cc69246c76
jline-reader@3.30.14
3.30.15

Open the chart page →

33
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jline-reader@3.13.1
3.30.15

Open the chart page →

5,427
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
jline-reader@3.21.0
3.30.15

Open the chart page →

4,388
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
jline-reader@3.21.0
3.30.15

Open the chart page →

4,869
stewardsoftwaremillVerified publisher0.1.121 of 1See more

steward softwaremill 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
fthomas/scala-steward:latesta8eb43927576
jline-reader@3.29.0
3.30.15

Open the chart page →

428
hazelcaststakaterVerified publisher1.0.21 of 1See more

hazelcast stakater 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
hazelcast/hazelcast:latestf086bf0ecb23
jline-reader@3.30.9
3.30.15

Open the chart page →

1,708
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
jline-reader@3.12.1
3.30.15

Open the chart page →

14,024
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
jline-reader@3.9.0
3.30.15

Open the chart page →

4,265
kafkatwomartensVerified publisher0.2.11 of 2See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:latest5e8f3ab5b497
jline-reader@3.30.4
3.30.15

Open the chart page →

1,271
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
jline-reader@3.25.1
3.30.15

Open the chart page →

1,781
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.49c344d2b1757
jline-reader@3.27.1
3.30.15

Open the chart page →

5,648
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
jline-reader@3.21.0
3.30.15

Open the chart page →

9,469
hazelcastwener5.10.31 of 2See more

hazelcast wener 5.10.3

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jline-reader@3.26.2
3.30.15

Open the chart page →

2,765
hazelcastwenerme5.10.31 of 2See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jline-reader@3.26.2
3.30.15

Open the chart page →

2,813
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
jline-reader@3.21.0
3.30.15

Open the chart page →

2,315
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-77420.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
jline-reader@3.21.0
3.30.15

Open the chart page →

9,550

Container images carrying it

146 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
jline-reader@3.12.1
3.30.15
7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
jline-reader@3.30.4
3.30.15
7
solsson/kafka:latest41e5d8f6f290
jline-reader@3.21.0
3.30.15
5
hazelcast/hazelcast:5.5.05dd5d31c7a06
jline-reader@3.26.2
3.30.15
3
library/zookeeper:3.9.57d0f24ebb67b
jline-reader@3.25.1
3.30.15
3
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jline-reader@3.29.0
3.30.15
3
apache/druid:37.0.00116fb802786
jline-reader@3.9.0
3.30.15
2
apache/iotdb:0.13.3-nodeafa47bf1692a
jline-reader@3.21.0
3.30.15
2
apache/kafka:4.3.177e3df905404
jline-reader@3.30.4
3.30.15
2
apache/nifi-registry:1.26.07cdfd8deec92
jline-reader@3.25.1
3.30.15
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jline-reader@3.21.0
3.30.15
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
jline-reader@3.12.1
3.30.15
2
confluentinc/cp-zookeeper:latest7610a50b13e7
jline-reader@3.25.1
3.30.15
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
jline-reader@3.12.1
3.30.15
2
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jline-reader@3.8.2
3.30.15
2
library/elasticsearch:7.17.35e6ac15bf6a5
jline-reader@3.14.1
3.30.15
2
library/elasticsearch:8.19.1289729a95066a
jline-reader@3.21.0
3.30.15
2
library/neo4j:5.20.052d3dec8d455
jline-reader@3.21.0
3.30.15
2
opensearchproject/opensearch:2.1.04254021a8c71
jline-reader@3.21.0
3.30.15
2
opensearchproject/opensearch:2.18.07f6fa1efee8f
jline-reader@3.21.0
3.30.15
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
jline-reader@3.26.3
3.30.15
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
jline-reader@3.30.4
3.30.15
2
5200710/hadoop:3.2.3-java8092d3088a5fb
jline-reader@3.9.0
3.30.15
1
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
jline-reader@4.2.1
4.3.1
1
apache/activemq-artemis:2.44.00305c26f19ed
jline-reader@3.30.6
3.30.15
1
apache/activemq-artemis:2.37.0bae523439ee3
jline-reader@3.26.3
3.30.15
1
apache/drill:1.21.11f96558fd292
jline-reader@3.21.0
3.30.15
1
apache/druid:29.0.10cef139b6bf1
jline-reader@3.9.0
3.30.15
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jline-reader@3.9.0
3.30.15
1
apache/hadoop:3af361b20bec0
jline-reader@3.9.0
3.30.15
1
apache/iotdb:0.11.28647309f95d1
jline-reader@3.16.0
3.30.15
1
apache/kafka:4.1.0bff074a5d005
jline-reader@3.30.4
3.30.15
1
apache/kafka:3.9.0fbc7d7c428e3
jline-reader@3.25.1
3.30.15
1
apache/nifi-registry:1.27.063b8e3e40742
jline-reader@3.25.1
3.30.15
1
apache/polaris:lateste66366e783f1
jline-reader@3.9.0
3.30.15
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
jline-reader@3.21.0
3.30.15
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
jline-reader@3.12.1
3.30.15
1
apachepulsar/pulsar:3.0.79c9947de139d
jline-reader@3.21.0
3.30.15
1
apachepulsar/pulsar:2.9.0d056c89b7131
jline-reader@3.12.1
3.30.15
1
apachepulsar/pulsar:2.8.2d538416d5afe
jline-reader@3.12.1
3.30.15
1
apache/ranger:2.7.076c176e8a0e4
jline-reader@3.9.0
3.30.15
1
assistiot/automated_configuration:latest23f195a7a26a
jline-reader@3.19.0
3.30.15
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
jline-reader@3.14.1
3.30.15
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
jline-reader@3.9.0
3.30.15
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
jline-reader@3.19.0
3.30.15
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
jline-reader@3.21.0
3.30.15
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
jline-reader@3.21.0
3.30.15
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
jline-reader@3.21.0
3.30.15
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
jline-reader@3.22.0
3.30.15
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
jline-reader@3.21.0
3.30.15
1

syft 1.42.1 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.