JLine vulnerable to out of memory error

MEDIUM 5.5CVE-2023-50572 · GHSA-2268-98wh-qfhf · Published 29/12/2023 · updated 07/10/2026

In short

CVE-2023-50572 is a MEDIUM (CVSS 5.5) vulnerability affecting org.jline:jline-parent, jline (jline).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.2% of all vulnerabilities.
Fix: update to 3.25.0 or later.

Package	Affected versions	Patched versions
org.jline:jline-parent Maven	`< 3.25.0`	`3.25.0`
jline jline	`< 3.25.0`	`3.25.0`

An issue in the component GroovyEngine.execute of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.

NVD description

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.