https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:01:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06690 bdu:2025-06690 https://cve.radiocsirt.org/vuln/bdu:2025-06690 https://cve.radiocsirt.org/vuln/bell-cve-2024-53427 <p><strong>Affected:</strong> Alpaquita:25: jq, Alpaquita:stream: jq</p> <p><strong>Affected:</strong> Alpaquita:25: jq, Alpaquita:stream: jq</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-53427 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-226060 EUVD-2026-226060 https://cve.radiocsirt.org/vuln/euvd-2026-226060 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53427 <p>decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., &#34;1 NaN123&#34; immediately followed by many more digits).</p> <p>decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., &#34;1 NaN123&#34; immediately followed by many more digits).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53427 https://cve.radiocsirt.org/vuln/ghsa-8mxc-vqrq-gcm8 <p>jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.</p> <p>jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.</p> https://cve.radiocsirt.org/vuln/ghsa-8mxc-vqrq-gcm8 https://cve.radiocsirt.org/vuln/msrc_cve-2024-53427 msrc_CVE-2024-53427 https://cve.radiocsirt.org/vuln/msrc_cve-2024-53427 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15161-1 <p>jq-1.7.1-3.1 on GA media</p> <p>jq-1.7.1-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15161-1 https://cve.radiocsirt.org/vuln/suse-su-2025:20591-1 <p>Security update for jq</p> <p>Security update for jq</p> https://cve.radiocsirt.org/vuln/suse-su-2025:20591-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53427 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: jq</p> <p>decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., &#34;1 NaN123&#34; immediately followed by many more digits).</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: jq</p> <p>decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., &#34;1 NaN123&#34; immediately followed by many more digits).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53427