Skip to content
OpenAdvisories

Package · Wolfi

jq

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-32316

    jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

    jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-b…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.1
    CVE-2024-53427

    decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which h…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine Wolfi