{"id":"GHSA-2268-98wh-qfhf","summary":"JLine vulnerable to out of memory error","details":"An issue in the component `GroovyEngine.execute` of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.","aliases":["CVE-2023-50572"],"modified":"2024-02-16T08:07:52.686694Z","published":"2023-12-29T15:30:37Z","database_specific":{"cwe_ids":["CWE-122","CWE-787"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2023-12-29T20:08:20Z","nvd_published_at":"2023-12-29T15:15:10Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50572"},{"type":"WEB","url":"https://github.com/jline/jline3/issues/909"},{"type":"WEB","url":"https://github.com/jline/jline3/commit/f3c60a3e6255e8e0c20d5043a4fe248446f292bb"},{"type":"PACKAGE","url":"https://github.com/jline/jline3"}],"affected":[{"package":{"name":"org.jline:jline-parent","ecosystem":"Maven","purl":"pkg:maven/org.jline/jline-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.0"}]}],"versions":["3.10.0","3.11.0","3.12.0","3.12.1","3.13.0","3.13.1","3.13.2","3.13.3","3.14.0","3.14.1","3.15.0","3.16.0","3.17.0","3.17.1","3.18.0","3.19.0","3.2.0","3.20.0","3.21.0","3.22.0","3.23.0","3.24.0","3.24.1","3.3.0","3.3.1","3.4.0","3.5.0","3.5.1","3.5.2","3.6.0","3.6.1","3.6.2","3.7.0","3.7.1","3.8.0","3.8.1","3.8.2","3.9.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}