Medium, CVSS 5.5MavenPublished
JLine vulnerable to out of memory error
CVE-2023-50572 · GHSA-2268-98wh-qfhf
- Affected
- Maven org.jline:jline-parent < 3.25.0
- Fixed in
- 3.25.0· Vendor fix available
- Issue
- An issue in the component GroovyEngine.execute of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.
Recommended action: Upgrade to 3.25.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.