https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:24:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05571 bdu:2026-05571 https://cve.radiocsirt.org/vuln/bdu:2026-05571 https://cve.radiocsirt.org/vuln/bell-cve-2026-33948 <p><strong>Affected:</strong> Alpaquita:23: jq, Alpaquita:25: jq, Alpaquita:stream: jq</p> <p><strong>Affected:</strong> Alpaquita:23: jq, Alpaquita:25: jq, Alpaquita:stream: jq</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-33948 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0463 certfr-2026-avi-0463 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0463 https://cve.radiocsirt.org/vuln/euvd-2026-291254 EUVD-2026-291254 https://cve.radiocsirt.org/vuln/euvd-2026-291254 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33948 <p>jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine buffer length instead of the actual byte count from fgets(), causing it to truncate input at the first NUL byte and parse only the preceding prefix. This enables an attacker to craft input with a benign JSON prefix before a NUL byte followed by malicious trailing data, where jq validates only the prefix as valid JSON while silently discarding the suffix. Workflows relying on jq to validate untrusted JSON before forwarding it to downstream consumers are susceptible to parser differential attacks, as those consumers may process the full input including the malicious trailing bytes. This issue has been patched by commit 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b.</p> <p>jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine buffer length instead of the actual byte count from fgets(), causing it to truncate input at the first NUL byte and parse only the preceding prefix. This enables an attacker to craft input with a benign JSON prefix before a NUL byte followed by malicious trailing data, where jq validates only the prefix as valid JSON while silently discarding the suffix. Workflows relying on jq to validate untrusted JSON before forwarding it to downstream consumers are susceptible to parser differential attacks, as those consumers may process the full input including the malicious trailing bytes. This issue has been patched by commit 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33948 https://cve.radiocsirt.org/vuln/msrc_cve-2026-33948 msrc_CVE-2026-33948 https://cve.radiocsirt.org/vuln/msrc_cve-2026-33948 https://cve.radiocsirt.org/vuln/oesa-2026-1981 <p><strong>Affected:</strong> openEuler:24.03-LTS: jq, openEuler:24.03-LTS-SP1: jq, openEuler:24.03-LTS-SP2: jq, openEuler:24.03-LTS-SP3: jq, openEuler:20.03-LTS-SP4: jq, openEuler:22.03-LTS-SP4: jq</p> <p>jq is a lightweight and flexible command-line JSON processor. you can use it to slice and filter and map and transform structured data. It is written in portable C, and it has zero runtime dependencies. it can mangle the data format that you have into the one that you want. Security Fix(es):</p> <p>jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer allocation size calculation, resulting in a drastically undersized heap buffer. Subsequent memory copy operations then write the full string data into this undersized buffer, causing a heap buffer overflow classified as CWE-190 (Integer Overflow) leading to CWE-122 (Heap-based Buffer Overflow). Any system evaluating untrusted jq queries is affected, as an attacker can crash the process or potentially achieve further exploitation through heap corruption by crafting queries that produce extremely large strings. The root cause is the absence of string size bounds checking, unlike arrays and objects which already have size limits. The issue has been addressed in commit e47e56d226519635768e6aab2f38f0ab037c09e5.(CVE-2026-32316)</p> <p>jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq&amp;apos;s src/jv_aux.c use unbounded r…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: jq, openEuler:24.03-LTS-SP1: jq, openEuler:24.03-LTS-SP2: jq, openEuler:24.03-LTS-SP3: jq, openEuler:20.03-LTS-SP4: jq, openEuler:22.03-LTS-SP4: jq</p> <p>jq is a lightweight and flexible command-line JSON processor. you can use it to slice and filter and map and transform structured data. It is written in portable C, and it has zero runtime dependencies. it can mangle the data format that you have into the one that you want. Security Fix(es):</p> <p>jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer allocation size calculation, resulting in a drastically undersized heap buffer. Subsequent memory copy operations then write the full string data into this undersized buffer, causing a heap buffer overflow classified as CWE-190 (Integer Overflow) leading to CWE-122 (Heap-based Buffer Overflow). Any system evaluating untrusted jq queries is affected, as an attacker can crash the process or potentially achieve further exploitation through heap corruption by crafting queries that produce extremely large strings. The root cause is the absence of string size bounds checking, unlike arrays and objects which already have size limits. The issue has been addressed in commit e47e56d226519635768e6aab2f38f0ab037c09e5.(CVE-2026-32316)</p> <p>jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq&amp;apos;s src/jv_aux.c use unbounded r…</p> https://cve.radiocsirt.org/vuln/oesa-2026-1981 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10850-1 <p>jq-1.8.1-3.1 on GA media</p> <p>jq-1.8.1-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10850-1 https://cve.radiocsirt.org/vuln/rhsa-2026:8579 <p>jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow jq: unbounded Recursion in jv_setpath() / jv_getpath() / delpaths_sorted() jq: jq: Input validation bypass via embedded NUL bytes allows parser differential attacks jq: missing runtime type checks for _strindices lead to crash and limited memory disclosure jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers jq: jq: Denial of Service via crafted JSON object causing hash collisions</p> <p>jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow jq: unbounded Recursion in jv_setpath() / jv_getpath() / delpaths_sorted() jq: jq: Input validation bypass via embedded NUL bytes allows parser differential attacks jq: missing runtime type checks for _strindices lead to crash and limited memory disclosure jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers jq: jq: Denial of Service via crafted JSON object causing hash collisions</p> https://cve.radiocsirt.org/vuln/rhsa-2026:8579 https://cve.radiocsirt.org/vuln/suse-su-2026:22545-1 <p>Security update for jq</p> <p>Security update for jq</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22545-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33948 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: jq, Ubuntu:Pro:18.04:LTS: jq, Ubuntu:Pro:20.04:LTS: jq, Ubuntu:22.04:LTS: jq, Ubuntu:24.04:LTS: jq, Ubuntu:25.10: jq, Ubuntu:26.04:LTS: jq</p> <p>jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine buffer length instead of the actual byte count from fgets(), causing it to truncate input at the first NUL byte and parse only the preceding prefix. This enables an attacker to craft input with a benign JSON prefix before a NUL byte followed by malicious trailing data, where jq validates only the prefix as valid JSON while silently discarding the suffix. Workflows relying on jq to validate untrusted JSON before forwarding it to downstream consumers are susceptible to parser differential attacks, as those consumers may process the full input including the malicious trailing bytes. This issue has been patched by commit 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: jq, Ubuntu:Pro:18.04:LTS: jq, Ubuntu:Pro:20.04:LTS: jq, Ubuntu:22.04:LTS: jq, Ubuntu:24.04:LTS: jq, Ubuntu:25.10: jq, Ubuntu:26.04:LTS: jq</p> <p>jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine buffer length instead of the actual byte count from fgets(), causing it to truncate input at the first NUL byte and parse only the preceding prefix. This enables an attacker to craft input with a benign JSON prefix before a NUL byte followed by malicious trailing data, where jq validates only the prefix as valid JSON while silently discarding the suffix. Workflows relying on jq to validate untrusted JSON before forwarding it to downstream consumers are susceptible to parser differential attacks, as those consumers may process the full input including the malicious trailing bytes. This issue has been patched by commit 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33948