TI-2026-24844 CVE-2026-32316
jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow
Priority HIGH 75
jq is a command-line JSON processor.
RHSA-2026:8579
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images jq-1.8.1-3.hum1@aarch64, jq-1.8.1-3.hum1@src, jq-1.8.1-3.hum1@x86_64 +2
Fixes 6 records
Priority HIGH 72
jq is a command-line JSON processor.
TI-2026-28834 CVE-2026-39979
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Priority HIGH 70
jq is a command-line JSON processor.
TI-2026-26297 CVE-2026-33947
jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()
Priority MEDIUM 61
jq is a command-line JSON processor.
TI-2026-28812 CVE-2026-39956
jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
Priority MEDIUM 60
jq is a command-line JSON processor.
TI-2026-26298 CVE-2026-33948
jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input
Priority MEDIUM 48
jq is a command-line JSON processor.