Skip to content
OpenAdvisories

Package · Debian

jq

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.9
    CVE-2026-33948

    jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

    jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine …

    jqlang jq jq jq Debian Ubuntu Alpine
  • Low 3.3
    CVE-2025-9403

    jqlang jq JSON jq_test.c run_jq_tests assertion

    A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been pub…

    jqlang jq jq jq Debian Ubuntu