Known vulnerabilities in jq (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
jq (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:jq_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
10
Public exploits:
6
Known exploited (KEV):
0
Breakdown by Severity Chart
1.5+dfsg-1ubuntu0.1+esm2
1.3-1.1ubuntu1.1+esm3
1.8.2-1ubuntu1
1.2-8~ubuntu13.04.1
1.2-8~ubuntu12.10.1
1.8.1-4
1.8.1-4ubuntu1
1.5+dfsg-2ubuntu0.1~esm3
1.6-1ubuntu0.20.04.1+esm3
1.8.1-4ubuntu2
1.3-1.1ubuntu1.1+esm4
1.5+dfsg-1ubuntu0.1+esm4
1.5+dfsg-2ubuntu0.1~esm2
1.6-1ubuntu0.20.04.1+esm2
1.6-2.1ubuntu3.2
1.7.1-3ubuntu0.24.04.2
1.8.1-3ubuntu1.1
1.6-2ubuntu1
1.6-1ubuntu0.20.10.1
1.8.0-1
1.8.1-1
1.8.1-2
1.8.1-3
1.7.1-4
1.7.1-5
1.7.1-6
1.7.1-6ubuntu1
1.7.1-3ubuntu1
1.7.1-3
1.7.1-2
1.7.1-1
1.7-1
1.6-3
1.6-2.1ubuntu3
1.6-2.1ubuntu2
1.6-2
1.6-2.1
1.6-2.1ubuntu1
1.6-1ubuntu0.20.04.1
1.8.1-3ubuntu1
1.7.1-3build1
1.5+dfsg-1ubuntu0.1+esm3
1.5+dfsg-2ubuntu0.1~esm1
1.6-1ubuntu0.20.04.1+esm1
1.6-2.1ubuntu3.1
1.7.1-3ubuntu0.24.04.1
1.7.1-3ubuntu1.1
1.6
1.6-1
1.5+dfsg
1.4
1.4-2.1~ubuntu14.04.1
1.3
1.2
1.2-8~ubuntu12.04.1
1.5+dfsg-2build1
1.5+dfsg-2
1.5+dfsg-1ubuntu0.1
1.5+dfsg-1.2
1.5+dfsg-1.3
1.5+dfsg-1
1.5+dfsg-1.1
1.3-1.1ubuntu1
1.3-1.1ubuntu1.1
1.2-8
1.3-1
1.3-1.1
1.4-1
1.4-2
1.4-2.1
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125840 - NULL Pointer Dereference CVE-2026-39956 |
CWE-476 | Medium | 1.3-1.1ubuntu1.1+esm4, 1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.5+dfsg-2ubuntu0.1~esm3, 1.6-1ubuntu0.20.04.1+esm2, 1.6-1ubuntu0.20.04.1+esm3, 1.6-2.1ubuntu3.2, 1.7.1-3ubuntu0.24.04.2, 1.8.1-3ubuntu1.1, 1.8.1-4ubuntu2 | 13.04.2026 |
SB2026041326 SB2026041653 SB2026041746 and 6 more |
||
| #VU125839 - Improper Null Termination CVE-2026-33948 |
CWE-170 | Medium | 1.3-1.1ubuntu1.1+esm4, 1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.5+dfsg-2ubuntu0.1~esm3, 1.6-1ubuntu0.20.04.1+esm2, 1.6-1ubuntu0.20.04.1+esm3, 1.6-2.1ubuntu3.2, 1.7.1-3ubuntu0.24.04.2, 1.8.1-3ubuntu1.1, 1.8.1-4ubuntu2 | 13.04.2026 |
SB2026041326 SB20260417125 SB20260424145 and 11 more |
||
| #VU125833 - Integer overflow CVE-2026-32316 |
CWE-190 | High | 1.3-1.1ubuntu1.1+esm4, 1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.5+dfsg-2ubuntu0.1~esm3, 1.6-1ubuntu0.20.04.1+esm2, 1.6-1ubuntu0.20.04.1+esm3, 1.6-2.1ubuntu3.2, 1.7.1-3ubuntu0.24.04.2, 1.8.1-3ubuntu1.1, 1.8.1-4ubuntu2 | 13.04.2026 |
SB2026041326 SB2026041653 SB20260417125 and 6 more |
||
| #VU125832 - Inefficient Algorithmic Complexity CVE-2026-40164 |
CWE-407 | Medium | 1.3-1.1ubuntu1.1+esm4, 1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.5+dfsg-2ubuntu0.1~esm3, 1.6-1ubuntu0.20.04.1+esm2, 1.6-1ubuntu0.20.04.1+esm3, 1.6-2.1ubuntu3.2, 1.7.1-3ubuntu0.24.04.2, 1.8.1-3ubuntu1.1, 1.8.1-4ubuntu2 | 13.04.2026 |
SB2026041326 SB2026041653 SB20260417125 and 22 more |
||
| #VU125831 - Uncontrolled Recursion CVE-2026-33947 |
CWE-674 | Medium | 1.3-1.1ubuntu1.1+esm4, 1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.5+dfsg-2ubuntu0.1~esm3, 1.6-1ubuntu0.20.04.1+esm2, 1.6-1ubuntu0.20.04.1+esm3, 1.6-2.1ubuntu3.2, 1.7.1-3ubuntu0.24.04.2, 1.8.1-3ubuntu1.1, 1.8.1-4ubuntu2 | 13.04.2026 |
SB2026041326 SB2026041653 SB2026041746 and 6 more |
||
| #VU125830 - Out-of-bounds read CVE-2026-39979 |
CWE-125 | High | 1.3-1.1ubuntu1.1+esm4, 1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.5+dfsg-2ubuntu0.1~esm3, 1.6-1ubuntu0.20.04.1+esm2, 1.6-1ubuntu0.20.04.1+esm3, 1.6-2.1ubuntu3.2, 1.7.1-3ubuntu0.24.04.2, 1.8.1-3ubuntu1.1, 1.8.1-4ubuntu2 | 13.04.2026 |
SB2026041326 SB2026041653 SB20260417125 and 22 more |
||
| #VU111913 - Integer overflow CVE-2024-23337 |
CWE-190 | Medium | 1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1ubuntu3.1, 1.7.1-3ubuntu0.24.04.1, 1.7.1-3ubuntu1.1 | 25.06.2025 |
SB2025032035 SB2025070824 SB2025070826 and 29 more |
||
| #VU111912 - Heap-based Buffer Overflow CVE-2025-48060 |
CWE-122 | Medium | 1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1ubuntu3.1, 1.7.1-3ubuntu0.24.04.1, 1.7.1-3ubuntu1.1 | 25.06.2025 |
SB2025032035 SB2025070824 SB2025070826 and 38 more |
||
| #VU105901 - Stack-based buffer overflow CVE-2024-53427 |
CWE-121 | Medium | 1.6-2.1ubuntu3.1, 1.7.1-3ubuntu0.24.04.1, 1.7.1-3ubuntu1.1 | 20.03.2025 |
SB2025032035 SB2025060629 SB2025072105 and 2 more |
||
| #VU33028 - Memory corruption CVE-2016-4074 |
CWE-119 | Medium | 1.3-1.1ubuntu1.1+esm3, 1.5+dfsg-1ubuntu0.1+esm2 | 06.05.2016 |
SB2018041714 SB2023021411 SB2025050122 and 1 more |