Advisories · Technology
jq.
Every CVE that names jq among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
jq: stack overflow in deep structural equality
- jq
- Denial of service
- CVSS 7.1 High
jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow
- jq
- Memory corruption
- CVSS 6.9 Medium
jq: potential integer overflow in jvp_string_append
- jq
- Memory corruption
- CVSS 6.2 Medium
jq: Stack Overflow in Recursive Object Merge
- jq
- Denial of service
- CVSS 4.4 Medium
jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
- jq
- CWE-20
- CWE-158
- CVSS 5.4 Medium
jq: stack overflow in module loading on mutual `include`
- jq
- Denial of service
- CVSS 6.2 Medium
jq: Wild stack write via signed-integer overflow in decNumber D2U() macro
- jq
- Memory corruption
- CVSS 5.5 Medium
jq: Embedded NUL truncates top-level jq programs loaded with -f
- jq
- CWE-158
- CVSS 5.4 Medium
jq: Stack overflow via unbounded recursion in jv_contains
- jq
- Denial of service
- CVSS 6.4 Medium
jq: Signed-int overflow in `stack_reallocate` (jq VM stack)
- jq
- Memory corruption
- CVSS 2.9 Low
jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input
- jq
- CWE-20
- CWE-170
- CVSS 7.5 High
jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed
- jq
- Weak cryptography or TLS
- Denial of service
- CVSS 6.9 Medium
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
- jq
- Memory corruption
- CVSS 6.1 Medium
jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
- jq
- Memory corruption
- CVSS 6.2 Medium
jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()
- jq
- Denial of service
- CVSS 8.2 High
jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow
- jq
- Memory corruption
- CVSS 4.8 Medium
jqlang jq JSON jq_test.c run_jq_tests assertion
- jq
- Denial of service
- CVSS 5.5 Medium
jq heap use after free vulnerability in f_strflocaltime
- jq
- Memory corruption
- CVSS 7.7 High
AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
- jq
- Memory corruption
- CVSS 4.3 Medium
jq has signed integer overflow in jv.c:jvp_array_write
- jq
- Memory corruption
- CVSS 8.1 High
Type confusion in jq
- jq
- Memory corruption
- CVSS 6.2 Medium
jq has stack-based buffer overflow in decNaNs
- jq
- Memory corruption
- CVSS 6.2 Medium
jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c
- jq
- Memory corruption