TI-2026-36743 CVE-2026-49839
jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow
Priority HIGH 66
jq is a command-line JSON processor.
RHSA-2026:29986
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-06-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images jq-1.8.2-0.1.hum1@aarch64, jq-1.8.2-0.1.hum1@src, jq-1.8.2-0.1.hum1@x86_64 +2
Fixes 10 records
TI-2026-31960 CVE-2026-43896
jq: Stack Overflow in Recursive Object Merge
Priority MEDIUM 61
jq is a command-line JSON processor.
TI-2026-31958 CVE-2026-43894
jq: Wild stack write via signed-integer overflow in decNumber D2U() macro
Priority MEDIUM 61
jq is a command-line JSON processor.
Priority MEDIUM 58
jq is a command-line JSON processor.
Priority MEDIUM 58
jq is a command-line JSON processor.
Priority MEDIUM 58
jq is a command-line JSON processor.
TI-2026-31959 CVE-2026-43895
Improper input validation in jqlang jq
Priority MEDIUM 54
jq is a command-line JSON processor.
Priority LOW 29
jq is a command-line JSON processor.
TI-2026-35267 CVE-2026-47770
jq: stack overflow in deep structural equality
Priority LOW 29
jq is a command-line JSON processor.
Priority LOW 29
jq is a command-line JSON processor.