agentprime: jqEvery new CVE for jq.https://agentprime.io/CVE-2026-47770: jq: stack overflow in deep structural equalityhttps://agentprime.io/advisories/CVE-2026-47770/https://agentprime.io/advisories/CVE-2026-47770/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 17:22:21 GMTCVECVE-2026-49839: jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflowhttps://agentprime.io/advisories/CVE-2026-49839/https://agentprime.io/advisories/CVE-2026-49839/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 17:17:46 GMTCVECVE-2026-54679: jq: potential integer overflow in jvp_string_appendhttps://agentprime.io/advisories/CVE-2026-54679/https://agentprime.io/advisories/CVE-2026-54679/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 17:16:18 GMTCVECVE-2026-43896: jq: Stack Overflow in Recursive Object Mergehttps://agentprime.io/advisories/CVE-2026-43896/https://agentprime.io/advisories/CVE-2026-43896/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:24:48 GMTCVECVE-2026-43895: jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifactshttps://agentprime.io/advisories/CVE-2026-43895/https://agentprime.io/advisories/CVE-2026-43895/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:24:02 GMTCVECVE-2026-44777: jq: stack overflow in module loading on mutual `include`https://agentprime.io/advisories/CVE-2026-44777/https://agentprime.io/advisories/CVE-2026-44777/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:23:20 GMTCVECVE-2026-43894: jq: Wild stack write via signed-integer overflow in decNumber D2U() macrohttps://agentprime.io/advisories/CVE-2026-43894/https://agentprime.io/advisories/CVE-2026-43894/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:20:06 GMTCVECVE-2026-41256: jq: Embedded NUL truncates top-level jq programs loaded with -fhttps://agentprime.io/advisories/CVE-2026-41256/https://agentprime.io/advisories/CVE-2026-41256/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:18:30 GMTCVECVE-2026-40612: jq: Stack overflow via unbounded recursion in jv_containshttps://agentprime.io/advisories/CVE-2026-40612/https://agentprime.io/advisories/CVE-2026-40612/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:16:25 GMTCVECVE-2026-41257: jq: Signed-int overflow in `stack_reallocate` (jq VM stack)https://agentprime.io/advisories/CVE-2026-41257/https://agentprime.io/advisories/CVE-2026-41257/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:14:32 GMTCVECVE-2026-33948: jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Inputhttps://agentprime.io/advisories/CVE-2026-33948/https://agentprime.io/advisories/CVE-2026-33948/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 23:51:04 GMTCVECVE-2026-40164: jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedhttps://agentprime.io/advisories/CVE-2026-40164/https://agentprime.io/advisories/CVE-2026-40164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 23:40:12 GMTCVECVE-2026-39979: jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffershttps://agentprime.io/advisories/CVE-2026-39979/https://agentprime.io/advisories/CVE-2026-39979/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 22:18:56 GMTCVECVE-2026-39956: jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosurehttps://agentprime.io/advisories/CVE-2026-39956/https://agentprime.io/advisories/CVE-2026-39956/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 22:10:18 GMTCVECVE-2026-33947: jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()https://agentprime.io/advisories/CVE-2026-33947/https://agentprime.io/advisories/CVE-2026-33947/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 21:50:18 GMTCVECVE-2026-32316: jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflowhttps://agentprime.io/advisories/CVE-2026-32316/https://agentprime.io/advisories/CVE-2026-32316/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 17:49:34 GMTCVECVE-2025-9403: jqlang jq JSON jq_test.c run_jq_tests assertionhttps://agentprime.io/advisories/CVE-2025-9403/https://agentprime.io/advisories/CVE-2025-9403/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Aug 2025 02:02:07 GMTCVECVE-2025-49014: jq heap use after free vulnerability in f_strflocaltimehttps://agentprime.io/advisories/CVE-2025-49014/https://agentprime.io/advisories/CVE-2025-49014/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 15:08:04 GMTCVECVE-2025-48060: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)https://agentprime.io/advisories/CVE-2025-48060/https://agentprime.io/advisories/CVE-2025-48060/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 May 2025 17:32:43 GMTCVECVE-2024-23337: jq has signed integer overflow in jv.c:jvp_array_writehttps://agentprime.io/advisories/CVE-2024-23337/https://agentprime.io/advisories/CVE-2024-23337/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 May 2025 14:34:51 GMTCVECVE-2024-53427: Type confusion in jqhttps://agentprime.io/advisories/CVE-2024-53427/https://agentprime.io/advisories/CVE-2024-53427/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Feb 2025 00:00:00 GMTCVECVE-2023-50268: jq has stack-based buffer overflow in decNaNshttps://agentprime.io/advisories/CVE-2023-50268/https://agentprime.io/advisories/CVE-2023-50268/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 20:49:54 GMTCVECVE-2023-50246: jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.chttps://agentprime.io/advisories/CVE-2023-50246/https://agentprime.io/advisories/CVE-2023-50246/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 20:43:50 GMTCVE