Log in Start free

jqlang

Products

ProductCVEsExploitedLatest
jq23–Jun 25, 2026

Exploited and recent CVEs

  • CVE-2026-47770 Medium 6.8 jq: stack overflow in deep structural equality 0.1%
  • CVE-2026-49839 High 7.1 jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow 0.2%
  • CVE-2026-54679 Medium 6.9 jq: potential integer overflow in jvp_string_append 0.1%
  • CVE-2026-43896 Medium 6.2 jq: Stack Overflow in Recursive Object Merge 0.2%
  • CVE-2026-43895 Medium 4.4 jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 0.2%
  • CVE-2026-44777 Medium 5.4 jq: stack overflow in module loading on mutual `include` 0.2%
  • CVE-2026-43894 Medium 6.2 jq: Wild stack write via signed-integer overflow in decNumber D2U() macro 0.2%
  • CVE-2026-41256 Medium 5.5 jq: Embedded NUL truncates top-level jq programs loaded with -f 0.2%
  • CVE-2026-40612 Medium 5.4 jq: Stack overflow via unbounded recursion in jv_contains 0.2%
  • CVE-2026-41257 Medium 6.4 jq: Signed-int overflow in `stack_reallocate` (jq VM stack) 0.1%
  • CVE-2026-33948 Low 2.9 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input 0.3%
  • CVE-2026-40164 High 7.5 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed 0.4%
  • CVE-2026-39979 High 8.2 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers 0.6%
  • CVE-2026-39956 Medium 6.1 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure 0.2%
  • CVE-2026-33947 Medium 6.2 jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted() 0.2%
  • CVE-2026-32316 High 8.2 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow 0.8%
  • CVE-2025-9403 Low 3.3 jqlang jq JSON jq_test.c run_jq_tests assertion 0.2%
  • CVE-2025-49014 Medium 5.5 jq heap use after free vulnerability in f_strflocaltime 0.4%
  • CVE-2025-48060 High 7.7 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) 0.6%
  • CVE-2024-23337 Medium 4.3 jq has signed integer overflow in jv.c:jvp_array_write 0.5%
  • CVE-2024-53427 High 8.1 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrat 0.4%
  • CVE-2023-50268 Medium 6.2 jq has stack-based buffer overflow in decNaNs 0.4%
  • CVE-2023-50246 Medium 6.2 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c 0.5%