Описание
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| jq | fixed | 1.8.1-6 | package | |
| jq | no-dsa | trixie | package |
Примечания
https://github.com/jqlang/jq/security/advisories/GHSA-rmpv-jgvr-wpr9
EPSS
Связанные уязвимости
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
Уязвимость функционального языка программирования jq, связанная с неконтролируемой рекурсией, позволяющая нарушителю вызывать отказ в обслуживании
EPSS