https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:45:52.292138+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07446 bdu:2025-07446 2026-10-08T02:45:52.302013+00:00 bdu:2025-07446 https://cve.radiocsirt.org/vuln/bell-cve-2025-49014 BELL-CVE-2025-49014 2026-10-08T02:45:52.302062+00:00

Affected: Alpaquita:25: jq, Alpaquita:stream: jq

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-08T02:45:52.302103+00:00 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-245604 EUVD-2026-245604 2026-10-08T02:45:52.302130+00:00 EUVD-2026-245604 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49014 fkie_cve-2025-49014 2026-10-08T02:45:52.302148+00:00

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-49014 msrc_CVE-2025-49014 — jq heap use after free vulnerability in f_strflocaltime 2026-10-08T02:45:52.302185+00:00 msrc_CVE-2025-49014 https://cve.radiocsirt.org/vuln/oesa-2025-1809 OESA-2025-1809 — jq security update 2026-10-08T02:45:52.302210+00:00

Affected: openEuler:22.03-LTS-SP3: jq, openEuler:22.03-LTS-SP4: jq, openEuler:24.03-LTS: jq, openEuler:24.03-LTS-SP1: jq, openEuler:24.03-LTS-SP2: jq, openEuler:20.03-LTS-SP4: jq

jq is a lightweight and flexible command-line JSON processor. you can use it to slice and filter and map and transform structured data. It is written in portable C, and it has zero runtime dependencies. it can mangle the data format that you have into the one that you want. Security Fix(es):

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.(CVE-2024-23337)

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.(CVE-2025-48060)

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication.(CVE-2025-49014)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15233-1 openSUSE-SU-2025:15233-1 — jq-1.8.1-1.1 on GA media 2026-10-08T02:45:52.302269+00:00

jq-1.8.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-49014 Withdrawn: UBUNTU-CVE-2025-49014 2026-10-08T02:45:52.302299+00:00

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: jq, Ubuntu:24.04:LTS: jq, Ubuntu:25.04: jq

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication.