Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0yMjY4LTk4d2gtcWZoZs4AA4GU

JLine vulnerable to out of memory error

An issue in the component GroovyEngine.execute of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.

Permalink: https://github.com/advisories/GHSA-2268-98wh-qfhf
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yMjY4LTk4d2gtcWZoZs4AA4GU
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 11 months ago
Updated: 11 months ago

CVSS Score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Identifiers: GHSA-2268-98wh-qfhf, CVE-2023-50572
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-50572
• https://github.com/jline/jline3/issues/909
• https://github.com/jline/jline3/commit/f3c60a3e6255e8e0c20d5043a4fe248446f292bb
• https://github.com/advisories/GHSA-2268-98wh-qfhf

Repository: https://github.com/jline/jline3
Blast Radius: 1.0

Affected Packages