Known vulnerabilities in jq

Known vulnerabilities in jq

Vendor: Fedoraproject

Software: jq

Software CPE: cpe:2.3:o:fedoraproject:jq:*:*:*:*:*:fedora:*:*

Website: https://getfedora.org/

Total vulnerabilities: 18

Public exploits: 8

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU144356 - Uncontrolled Recursion CVE-2026-44777	CWE-674	Medium	No	No	1.8.2-4.fc45	19.08.2026	SB2026051149 SB2026081995 SB2026081996 and 7 more
#VU130919 - Improper Neutralization of Null Byte or NUL Character CVE-2026-43895	CWE-158	Low	Available	No	1.8.2-4.fc45	11.05.2026	SB2026051120 SB2026060928 SB2026081995 and 7 more
#VU130232 - Uncontrolled Recursion CVE-2026-43896	CWE-674	High	Available	No	1.8.2-4.fc45	06.05.2026	SB2026050621 SB2026052723 SB2026081995 and 7 more
#VU127880 - Uncontrolled Recursion CVE-2026-40612	CWE-674	Low	No	No	1.8.2-4.fc45	25.04.2026	SB2026042336 SB2026081995 SB2026081996 and 7 more
#VU127879 - Integer overflow CVE-2026-41257	CWE-190	Low	No	No	1.8.2-4.fc45	25.04.2026	SB2026042336 SB2026052723 SB2026081995 and 7 more
#VU127878 - Improper Neutralization of Null Byte or NUL Character CVE-2026-41256	CWE-158	Medium	No	No	1.8.2-4.fc45	25.04.2026	SB2026042336 SB2026081995 SB2026081996 and 7 more
#VU125840 - NULL Pointer Dereference CVE-2026-39956	CWE-476	Medium	Available	No	1.8.1-3.fc44	13.04.2026	SB2026041326 SB2026041653 SB2026041746 and 6 more
#VU125839 - Improper Null Termination CVE-2026-33948	CWE-170	Medium	Available	No	1.8.2-4.fc45	13.04.2026	SB2026041326 SB20260417125 SB20260424145 and 11 more
#VU125833 - Integer overflow CVE-2026-32316	CWE-190	High	Available	No	1.8.1-3.fc44	13.04.2026	SB2026041326 SB2026041653 SB20260417125 and 6 more
#VU125832 - Inefficient Algorithmic Complexity CVE-2026-40164	CWE-407	Medium	Available	No	1.8.1-3.fc44	13.04.2026	SB2026041326 SB2026041653 SB20260417125 and 18 more
#VU125831 - Uncontrolled Recursion CVE-2026-33947	CWE-674	Medium	Available	No	1.8.1-3.fc44	13.04.2026	SB2026041326 SB2026041653 SB2026041746 and 6 more
#VU125830 - Out-of-bounds read CVE-2026-39979	CWE-125	High	Available	No	1.8.1-3.fc44	13.04.2026	SB2026041326 SB2026041653 SB20260417125 and 18 more
#VU7349 - NULL Pointer Dereference CVE-2017-9229	CWE-476	Low	No	No	1.6-2.el7	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 17 more
#VU7348 - Out-of-bounds write CVE-2017-9228	CWE-787	High	No	No	1.6-2.el7	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 17 more
#VU7347 - Out-of-bounds read CVE-2017-9227	CWE-125	Low	No	No	1.6-2.el7	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 14 more
#VU7346 - Out-of-bounds write CVE-2017-9226	CWE-787	High	No	No	1.6-2.el7	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 14 more
#VU7345 - Out-of-bounds read CVE-2017-9224	CWE-125	Low	No	No	1.6-2.el7	06.07.2017	SB2017070604 SB2017071001 SB2017081719 and 15 more
#VU38946 - Out-of-bounds write CVE-2017-9225	CWE-787	High	No	No	1.6-2.el7	24.05.2017	SB2017052427 SB2017053020 SB2017053021 and 2 more