jqlang vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20255
3. 202616

Newest CVEs

• CVE-2026-47770

  jq: stack overflow in deep structural equality

  jqlang · jq

  Medium6.8
• CVE-2026-49839

  jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow

  jqlang · jq

  High7.1
• CVE-2026-54679

  jq: potential integer overflow in jvp_string_append

  jqlang · jq

  Medium6.9
• CVE-2026-43896

  jq: Stack Overflow in Recursive Object Merge

  jqlang · jq

  Medium6.2
• CVE-2026-43895

  jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

  jqlang · jq

  Medium4.4
• CVE-2026-44777

  jq: stack overflow in module loading on mutual `include`

  jqlang · jq

  Medium5.4
• CVE-2026-43894

  jq: Wild stack write via signed-integer overflow in decNumber D2U() macro

  jqlang · jq

  Medium6.2
• CVE-2026-41256

  jq: Embedded NUL truncates top-level jq programs loaded with -f

  jqlang · jq

  Medium5.5
• CVE-2026-40612

  jq: Stack overflow via unbounded recursion in jv_contains

  jqlang · jq

  Medium5.4
• CVE-2026-41257

  jq: Signed-int overflow in `stack_reallocate` (jq VM stack)

  jqlang · jq

  Medium6.4