A high severity denial of service vulnerability exists in the JLine3 library that may allow remote, unauthenticated attackers to exhaust system resources.

This vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption). It allows an unauthenticated remote attacker to trigger resource exhaustion, which results in a denial of service condition for the affected application.

The vulnerability carries a CVSS score of 7.5, indicating a high risk of service disruption. Successful exploitation could lead to application downtime or instability, potentially impacting business operations and user accessibility. Because the attack vector is network-based and does not require authentication, the risk to public-facing systems utilizing this library is elevated.

Immediate Action: Update jline3 to version 3.30.14, 4.0.16, or 4.2.1 depending on your current deployment branch.

Proactive Monitoring: Monitor server resource utilization, specifically CPU and memory consumption, for sudden spikes that may indicate an ongoing denial of service attempt.

Compensating Controls: Implement rate limiting and input validation at the network perimeter or application gateway to reduce the impact of malformed console input requests.

Public Exploit Available: No (exploit_available: false)

Given the ease of exploitation and the potential for service disruption, administrators should prioritize updating the JLine3 library. Applying the patches provided by the vendor is the only definitive way to resolve this uncontrolled resource consumption flaw.