# org.jline:jline-remote-telnet (Maven) vulnerabilities 2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 4.5.0 (Nov 4, 2026): no advisory affects it - Newest unaffected release: 4.5.0 (Nov 4, 2026), the latest release - Dependents: 1 - Releases: 99 since 3.2.0 (Mar 13, 2017) - Registry: https://central.sonatype.com/artifact/org.jline/jline-remote-telnet - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-56740: 3.2.0 to 3.30.13 (3.30.14 is outside it); 4.0.0 to 4.0.15 (4.0.16 is outside it); 4.1.0 to 4.2.0 (4.2.1 is outside it) - CVE-2026-56741: 3.2.0 to 3.30.13 (3.30.14 is outside it); 4.0.0 to 4.0.15 (4.0.16 is outside it); 4.1.0 to 4.2.0 (4.2.1 is outside it) ## Advisories (2) ### [CVE-2026-56740](https://cve.now/CVE-2026-56740): JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables - Severity: High 7.5 - Published: Jul 17, 2026 - Affected: from 4.1.0, fixed in 4.2.1; from 4.0.0, fixed in 4.0.16; fixed in 3.30.14. - Fixed in 3.30.14 (released Jun 26, 2026, 21 days before disclosure), 4.0.16 (released Jun 26, 2026, 21 days before disclosure) and 4.2.1 (released Jun 17, 2026, 30 days before disclosure). - The latest release, 4.5.0, is not affected. ### [CVE-2026-56741](https://cve.now/CVE-2026-56741): JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry - Severity: High 7.5 - Published: Jul 17, 2026 - Affected: from 4.1.0, fixed in 4.2.1; from 4.0.0, fixed in 4.0.16; fixed in 3.30.14. - Fixed in 3.30.14 (released Jun 26, 2026, 21 days before disclosure), 4.0.16 (released Jun 26, 2026, 21 days before disclosure) and 4.2.1 (released Jun 17, 2026, 30 days before disclosure). - The latest release, 4.5.0, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/org.jline:jline-remote-telnet Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.