cve-2026-56740

HIGH CVSS 7.5 csaf_suse
Description

SUSE CVE-2026-56740

Timeline
Published
2026-07-21 13:06 UTC
Last Modified
2026-07-30
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "SUSE CVE-2026-56740",
        "title": "Title"
      },
      {
        "category": "description",
        "text": "JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables() in TelnetIO.java:1127-1180 stores each variable pair in a HashMap held by ConnectionData, allowing an unauthenticated attacker to flood unique variable pairs before the terminating IAC SE byte and exhaust JVM heap memory with an OutOfMemoryError. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.",
        "title": "Description of the CVE"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "CVE-2026-56740",
        "url": "https://www.suse.com/security/cve/CVE-2026-56740"
      },
      {
        "category": "external",
        "summary": "SUSE Security Ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "external",
        "summary": "SUSE Bug 1271949 for CVE-2026-56740",
        "url": "https://bugzilla.suse.com/1271949"
      },
      {
        "category": "external",
        "summary": "Advisory link for SUSE-SU-2026:22856-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027899.html"
      }
    ],
    "title": "SUSE CVE CVE-2026-56740",
    "tracking": {
      "current_release_date": "2026-07-30T16:37:57Z",
      "generator": {
        "date": "2026-07-21T13:06:10Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf-vex.pl",
          "version": "1"
        }
      },
      "id": "CVE-2026-56740",
      "initial_release_date": "2026-07-21T13:06:10Z",
      "revision_history": [
        {
          "date": "2026-07-21T13:06:10Z",
          "number": "2",
          "summary": "vulnerabilities added,references added,severity changed from  to important"
        },
        {
          "date": "2026-07-21T23:48:21Z",
          "number": "3",
          "summary": "vulnerabilities removed"
        },
        {
          "date": "2026-07-23T00:55:37Z",
          "number": "4",
          "summary": "vulnerabilities added"
        },
        {
          "date": "2026-07-30T16:37:57Z",
          "number": "5",
          "summary": "more updates released,references added"
        }
      ],
      "status": "interim",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server 16.0",
                  "product_id": "SUSE Linux Enterprise Server 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-3.30.15-160000.1.1",
                  "product_id": "jline3-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-3.30.15-3.1",
                "product": {
                  "name": "jline3-3.30.15-3.1",
                  "product_id": "jline3-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-builtins-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-builtins-3.30.15-160000.1.1",
                  "product_id": "jline3-builtins-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-builtins@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-builtins-3.30.15-3.1",
                "product": {
                  "name": "jline3-builtins-3.30.15-3.1",
                  "product_id": "jline3-builtins-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-builtins@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-console-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-console-3.30.15-160000.1.1",
                  "product_id": "jline3-console-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-console@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-console-3.30.15-3.1",
                "product": {
                  "name": "jline3-console-3.30.15-3.1",
                  "product_id": "jline3-console-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-console@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-console-ui-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-console-ui-3.30.15-160000.1.1",
                  "product_id": "jline3-console-ui-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-console-ui@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-console-ui-3.30.15-3.1",
                "product": {
                  "name": "jline3-console-ui-3.30.15-3.1",
                  "product_id": "jline3-console-ui-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-console-ui@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-curses-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-curses-3.30.15-160000.1.1",
                  "product_id": "jline3-curses-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-curses@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-curses-3.30.15-3.1",
                "product": {
                  "name": "jline3-curses-3.30.15-3.1",
                  "product_id": "jline3-curses-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-curses@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-jansi-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-jansi-3.30.15-160000.1.1",
                  "product_id": "jline3-jansi-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-jansi@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-jansi-3.30.15-3.1",
                "product": {
                  "name": "jline3-jansi-3.30.15-3.1",
                  "product_id": "jline3-jansi-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-jansi@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-jansi-core-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-jansi-core-3.30.15-160000.1.1",
                  "product_id": "jline3-jansi-core-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-jansi-core@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-jansi-core-3.30.15-3.1",
                "product": {
                  "name": "jline3-jansi-core-3.30.15-3.1",
                  "product_id": "jline3-jansi-core-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-jansi-core@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-javadoc-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-javadoc-3.30.15-160000.1.1",
                  "product_id": "jline3-javadoc-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-javadoc@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-javadoc-3.30.15-3.1",
                "product": {
                  "name": "jline3-javadoc-3.30.15-3.1",
                  "product_id": "jline3-javadoc-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-javadoc@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-native-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-native-3.30.15-160000.1.1",
                  "product_id": "jline3-native-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-native@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-native-3.30.15-3.1",
                "product": {
                  "name": "jline3-native-3.30.15-3.1",
                  "product_id": "jline3-native-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-native@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-reader-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-reader-3.30.15-160000.1.1",
                  "product_id": "jline3-reader-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-reader@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-reader-3.30.15-3.1",
                "product": {
                  "name": "jline3-reader-3.30.15-3.1",
                  "product_id": "jline3-reader-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-reader@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-remote-telnet-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-remote-telnet-3.30.15-160000.1.1",
                  "product_id": "jline3-remote-telnet-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-remote-telnet@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-remote-telnet-3.30.15-3.1",
                "product": {
                  "name": "jline3-remote-telnet-3.30.15-3.1",
                  "product_id": "jline3-remote-telnet-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-remote-telnet@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-style-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-style-3.30.15-160000.1.1",
                  "product_id": "jline3-style-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-style@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-style-3.30.15-3.1",
                "product": {
                  "name": "jline3-style-3.30.15-3.1",
                  "product_id": "jline3-style-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-style@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-terminal-3.30.15-160000.1.1",
                  "product_id": "jline3-terminal-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-3.30.15-3.1",
                "product": {
                  "name": "jline3-terminal-3.30.15-3.1",
                  "product_id": "jline3-terminal-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-ffm-3.30.15-3.1",
                "product": {
                  "name": "jline3-terminal-ffm-3.30.15-3.1",
                  "product_id": "jline3-terminal-ffm-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-ffm@3.30.15-3.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-jansi-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-terminal-jansi-3.30.15-160000.1.1",
                  "product_id": "jline3-terminal-jansi-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-jansi@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-jansi-3.30.15-3.1",
                "product": {
                  "name": "jline3-terminal-jansi-3.30.15-3.1",
                  "product_id": "jline3-terminal-jansi-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-jansi@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-jna-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-terminal-jna-3.30.15-160000.1.1",
                  "product_id": "jline3-terminal-jna-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-jna@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-jna-3.30.15-3.1",
                "product": {
                  "name": "jline3-terminal-jna-3.30.15-3.1",
                  "product_id": "jline3-terminal-jna-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-jna@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-jni-3.30.15-160000.1.1",
                "product": {
                  "name": "jline3-terminal-jni-3.30.15-160000.1.1",
                  "product_id": "jline3-terminal-jni-3.30.15-160000.1.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-jni@3.30.15-160000.1.1?upstream=jline3-3.30.15-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jline3-terminal-jni-3.30.15-3.1",
                "product": {
                  "name": "jline3-terminal-jni-3.30.15-3.1",
                  "product_id": "jline3-terminal-jni-3.30.15-3.1",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/jline3-terminal-jni@3.30.15-3.1?upstream=jline3-3.30.15-3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-builtins-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-builtins-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-builtins-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-console-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-console-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-ui-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-console-ui-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-console-ui-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-curses-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-curses-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-curses-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-jansi-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-core-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-core-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-jansi-core-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-javadoc-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-javadoc-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-javadoc-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-native-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-native-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-native-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-reader-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-reader-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-reader-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-remote-telnet-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-remote-telnet-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-remote-telnet-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-style-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-style-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-style-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jansi-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-jansi-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jansi-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jna-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-jna-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jna-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jni-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-jni-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jni-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-builtins-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-builtins-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-builtins-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-console-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-ui-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-ui-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-console-ui-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-curses-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-curses-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-curses-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-jansi-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-core-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-core-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-jansi-core-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-javadoc-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-javadoc-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-javadoc-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-native-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-native-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-reader-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-reader-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-reader-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-remote-telnet-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-remote-telnet-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-remote-telnet-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-style-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-style-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-style-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jansi-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jansi-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jansi-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jna-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jna-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jna-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jni-3.30.15-160000.1.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jni-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jni-3.30.15-160000.1.1",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-builtins-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-builtins-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-builtins-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-console-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-console-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-ui-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-console-ui-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-console-ui-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-curses-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-curses-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-curses-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-jansi-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-jansi-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-core-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-jansi-core-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-jansi-core-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-javadoc-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-javadoc-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-javadoc-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-native-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-native-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-native-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-reader-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-reader-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-reader-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-remote-telnet-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-remote-telnet-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-remote-telnet-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-style-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-style-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-style-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-terminal-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jansi-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-terminal-jansi-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jansi-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jna-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-terminal-jna-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jna-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jni-3.30.15-160000.1.1 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:jline3-terminal-jni-3.30.15-160000.1.1"
        },
        "product_reference": "jline3-terminal-jni-3.30.15-160000.1.1",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-3.30.15-3.1"
        },
        "product_reference": "jline3-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-builtins-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-builtins-3.30.15-3.1"
        },
        "product_reference": "jline3-builtins-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-console-3.30.15-3.1"
        },
        "product_reference": "jline3-console-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-console-ui-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-console-ui-3.30.15-3.1"
        },
        "product_reference": "jline3-console-ui-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-curses-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-curses-3.30.15-3.1"
        },
        "product_reference": "jline3-curses-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-jansi-3.30.15-3.1"
        },
        "product_reference": "jline3-jansi-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-jansi-core-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-jansi-core-3.30.15-3.1"
        },
        "product_reference": "jline3-jansi-core-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-javadoc-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-javadoc-3.30.15-3.1"
        },
        "product_reference": "jline3-javadoc-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-native-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-native-3.30.15-3.1"
        },
        "product_reference": "jline3-native-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-reader-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-reader-3.30.15-3.1"
        },
        "product_reference": "jline3-reader-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-remote-telnet-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-remote-telnet-3.30.15-3.1"
        },
        "product_reference": "jline3-remote-telnet-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-style-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-style-3.30.15-3.1"
        },
        "product_reference": "jline3-style-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-terminal-3.30.15-3.1"
        },
        "product_reference": "jline3-terminal-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-ffm-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-terminal-ffm-3.30.15-3.1"
        },
        "product_reference": "jline3-terminal-ffm-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jansi-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-terminal-jansi-3.30.15-3.1"
        },
        "product_reference": "jline3-terminal-jansi-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jna-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-terminal-jna-3.30.15-3.1"
        },
        "product_reference": "jline3-terminal-jna-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jline3-terminal-jni-3.30.15-3.1 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jline3-terminal-jni-3.30.15-3.1"
        },
        "product_reference": "jline3-terminal-jni-3.30.15-3.1",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-56740",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56740"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables() in TelnetIO.java:1127-1180 stores each variable pair in a HashMap held by ConnectionData, allowing an unauthenticated attacker to flood unique variable pairs before the terminating IAC SE byte and exhaust JVM heap memory with an OutOfMemoryError. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:jline3-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-builtins-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-console-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-console-ui-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-curses-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-jansi-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-jansi-core-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-javadoc-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-native-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-reader-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-style-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-terminal-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-builtins-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-ui-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-curses-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-core-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-javadoc-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-reader-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-style-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
          "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-builtins-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-console-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-console-ui-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-curses-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-jansi-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-jansi-core-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-javadoc-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-native-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-reader-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-style-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-terminal-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
          "openSUSE Leap 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
          "openSUSE Tumbleweed:jline3-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-builtins-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-console-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-console-ui-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-curses-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-jansi-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-jansi-core-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-javadoc-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-native-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-reader-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-remote-telnet-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-style-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-terminal-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-terminal-ffm-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-terminal-jansi-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-terminal-jna-3.30.15-3.1",
          "openSUSE Tumbleweed:jline3-terminal-jni-3.30.15-3.1"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56740",
          "url": "https://www.suse.com/security/cve/CVE-2026-56740"
        },
        {
          "category": "external",
          "summary": "SUSE Security Ratings",
          "url": "https://www.suse.com/support/security/rating/"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271949 for CVE-2026-56740",
          "url": "https://bugzilla.suse.com/1271949"
        },
        {
          "category": "external",
          "summary": "Advisory link for SUSE-SU-2026:22856-1",
          "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027899.html"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:jline3-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-builtins-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-console-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-console-ui-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-curses-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-jansi-core-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-javadoc-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-native-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-reader-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-style-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-builtins-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-ui-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-curses-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-core-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-javadoc-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-reader-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-style-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-builtins-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-console-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-console-ui-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-curses-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-jansi-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-jansi-core-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-javadoc-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-native-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-reader-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-style-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
            "openSUSE Tumbleweed:jline3-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-builtins-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-console-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-console-ui-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-curses-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-jansi-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-jansi-core-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-javadoc-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-native-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-reader-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-remote-telnet-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-style-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-ffm-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-jansi-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-jna-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-jni-3.30.15-3.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:jline3-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-builtins-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-console-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-console-ui-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-curses-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-jansi-core-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-javadoc-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-native-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-reader-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-style-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-builtins-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-ui-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-curses-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-core-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-javadoc-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-reader-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-style-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
            "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-builtins-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-console-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-console-ui-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-curses-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-jansi-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-jansi-core-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-javadoc-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-native-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-reader-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-remote-telnet-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-style-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-jansi-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-jna-3.30.15-160000.1.1",
            "openSUSE Leap 16.0:jline3-terminal-jni-3.30.15-160000.1.1",
            "openSUSE Tumbleweed:jline3-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-builtins-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-console-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-console-ui-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-curses-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-jansi-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-jansi-core-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-javadoc-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-native-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-reader-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-remote-telnet-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-style-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-ffm-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-jansi-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-jna-3.30.15-3.1",
            "openSUSE Tumbleweed:jline3-terminal-jni-3.30.15-3.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-18T00:02:03Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-56740"
    }
  ]
}
View JSON API Download JSON