JQ
Product
jq
24
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 18Low 0
Watch
Add jq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-53427 | 8.1 | Feb 26 | decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds… Affected: through 1.7.1 |
| CVE-2026-40164 | 7.5 | Apr 13 | jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed Affected: < 0c7d133c3c7e37c00b6d46b658a02244fdd3c784 |
| CVE-2026-32316 | 7.5 | Apr 13 | jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow Affected: < e47e56d226519635768e6aab2f38f0ab037c09e5 |
| CVE-2025-48060 | 7.5 | May 21 | AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) Affected: <= 1.7.1 |
| CVE-2023-49355 | 7.5 | Dec 11 | decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input Affected: 1.7-37-g88f01a7 |
| CVE-2026-49839 | 7.1 | Jun 25 | jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow Affected: < 1.8.2 |
Showing 6