Known vulnerabilities in jq
Vendor:
stedolan (Stephen Dolan)
Software:
jq
Software CPE:
cpe:2.3:a:stedolan:jq:*:*:*:*:*:*:*:*
Website:
https://github.com/stedolan/
Total vulnerabilities:
22
Public exploits:
9
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130926 - Out-of-bounds write CVE-2026-43894 |
CWE-787 | Low | Not fixed | 11.05.2026 | - | ||
| #VU130919 - Improper Neutralization of Null Byte or NUL Character CVE-2026-43895 |
CWE-158 | Low | Not fixed | 11.05.2026 | - | ||
| #VU130232 - Uncontrolled Recursion CVE-2026-43896 |
CWE-674 | High | Not fixed | 06.05.2026 | - | ||
| #VU127960 - Integer overflow |
CWE-190 | Medium | Not fixed | 27.04.2026 | - | ||
| #VU127880 - Uncontrolled Recursion CVE-2026-40612 |
CWE-674 | Low | Not fixed | 25.04.2026 | - | ||
| #VU127879 - Integer overflow CVE-2026-41257 |
CWE-190 | Low | Not fixed | 25.04.2026 | - | ||
| #VU127878 - Improper Neutralization of Null Byte or NUL Character CVE-2026-41256 |
CWE-158 | Medium | Not fixed | 25.04.2026 | - | ||
| #VU126893 - Use After Free |
CWE-416 | Low | Not fixed | 23.04.2026 | - | ||
| #VU126894 - Double Free |
CWE-415 | Low | Not fixed | 23.04.2026 | - | ||
| #VU125840 - NULL Pointer Dereference CVE-2026-39956 |
CWE-476 | Medium | Not fixed | 13.04.2026 | - | ||
| #VU125839 - Improper Null Termination CVE-2026-33948 |
CWE-170 | Medium | Not fixed | 13.04.2026 | - | ||
| #VU125833 - Integer overflow CVE-2026-32316 |
CWE-190 | High | Not fixed | 13.04.2026 | - | ||
| #VU125832 - Inefficient Algorithmic Complexity CVE-2026-40164 |
CWE-407 | Medium | Not fixed | 13.04.2026 | - | ||
| #VU125831 - Uncontrolled Recursion CVE-2026-33947 |
CWE-674 | Medium | Not fixed | 13.04.2026 | - | ||
| #VU125830 - Out-of-bounds read CVE-2026-39979 |
CWE-125 | High | Not fixed | 13.04.2026 | - | ||
| #VU111913 - Integer overflow CVE-2024-23337 |
CWE-190 | Medium | 1.8.0 | 25.06.2025 |
SB2025032035 SB2025070824 SB2025070826 and 29 more |
||
| #VU111912 - Heap-based Buffer Overflow CVE-2025-48060 |
CWE-122 | Medium | 1.8.0 | 25.06.2025 |
SB2025032035 SB2025070824 SB2025070826 and 38 more |
||
| #VU111911 - Memory corruption |
CWE-119 | Low | Not fixed | 25.06.2025 | - | ||
| #VU111309 - Use After Free CVE-2025-49014 |
CWE-416 | High | Not fixed | 19.06.2025 | - | ||
| #VU105901 - Stack-based buffer overflow CVE-2024-53427 |
CWE-121 | Medium | 1.8.0 | 20.03.2025 |
SB2025032035 SB2025060629 SB2025072105 and 1 more |
Showing elements 1 - 20 out of 22