Known vulnerabilities in jq

Vendor: stedolan (Stephen Dolan)
Software: jq
Software CPE: cpe:2.3:a:stedolan:jq:*:*:*:*:*:*:*:*
Website: https://github.com/stedolan/
Total vulnerabilities: 28
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jq jq is affected by 28 known vulnerabilities: 6 high, 11 medium, 11 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144356 - Uncontrolled Recursion
CVE-2026-44777		 CWE-674 Medium
No
No
 1.8.2 19.08.2026 SB2026051149
SB2026081995
SB2026081996
and 7 more
#VU144355 - Integer overflow
CVE-2026-54679		 CWE-190 Low
No
No
 1.8.2 19.08.2026 SB2026051149
SB2026081995
SB2026081996
and 5 more
#VU144354 - Out-of-bounds write
CVE-2026-49839		 CWE-787 High
No
No
 1.8.2 19.08.2026 SB2026051149
SB2026081995
SB2026081996
and 5 more
#VU144353 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
 CWE-758 Low
No
No
 1.8.2 19.08.2026 SB2026051149
#VU144352 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
 CWE-758 Low
No
No
 1.8.2 19.08.2026 SB2026051149
#VU144351 - Stack-based buffer overflow
CVE-2026-47770		 CWE-121 Low
No
No
 1.8.2 19.08.2026 SB2026051149
SB2026081995
SB2026081996
and 5 more
#VU130926 - Out-of-bounds write
CVE-2026-43894		 CWE-787 Low
No
No
 1.8.2 11.05.2026 SB2026051149
SB2026052723
SB2026081995
and 6 more
#VU130919 - Improper Neutralization of Null Byte or NUL Character
CVE-2026-43895		 CWE-158 Low
Available
No
 1.8.2 11.05.2026 SB2026051120
SB2026060928
SB2026081995
and 7 more
#VU130232 - Uncontrolled Recursion
CVE-2026-43896		 CWE-674 High
Available
No
 1.8.2 06.05.2026 SB2026050621
SB2026052723
SB2026081995
and 7 more
#VU127960 - Integer overflow
 CWE-190 Medium
Available
No
 1.8.2 27.04.2026 SB2026042732
#VU127880 - Uncontrolled Recursion
CVE-2026-40612		 CWE-674 Low
No
No
 1.8.2 25.04.2026 SB2026042336
SB2026081995
SB2026081996
and 7 more
#VU127879 - Integer overflow
CVE-2026-41257		 CWE-190 Low
No
No
 1.8.2 25.04.2026 SB2026042336
SB2026052723
SB2026081995
and 7 more
#VU127878 - Improper Neutralization of Null Byte or NUL Character
CVE-2026-41256		 CWE-158 Medium
No
No
 1.8.2 25.04.2026 SB2026042336
SB2026081995
SB2026081996
and 7 more
#VU126893 - Use After Free
 CWE-416 Low
No
No
 1.8.2 23.04.2026 SB2026042336
#VU126894 - Double Free
 CWE-415 Low
No
No
 1.8.2 23.04.2026 SB2026042336
#VU125840 - NULL Pointer Dereference
CVE-2026-39956		 CWE-476 Medium
Available
No
 1.8.2 13.04.2026 SB2026041326
SB2026041653
SB2026041746
and 6 more
#VU125839 - Improper Null Termination
CVE-2026-33948		 CWE-170 Medium
Available
No
 1.8.2 13.04.2026 SB2026041326
SB20260417125
SB20260424145
and 11 more
#VU125833 - Integer overflow
CVE-2026-32316		 CWE-190 High
Available
No
 1.8.2 13.04.2026 SB2026041326
SB2026041653
SB20260417125
and 6 more
#VU125832 - Inefficient Algorithmic Complexity
CVE-2026-40164		 CWE-407 Medium
Available
No
 1.8.2 13.04.2026 SB2026041326
SB2026041653
SB20260417125
and 18 more
#VU125830 - Out-of-bounds read
CVE-2026-39979		 CWE-125 High
Available
No
 1.8.2 13.04.2026 SB2026041326
SB2026041653
SB20260417125
and 18 more


Showing elements 1 - 20 out of 28