Поиск уязвимостей
Количество 32
Количество 32
CVE-2025-48060
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.
CVE-2025-48060
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.
CVE-2025-48060
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.
CVE-2025-48060
AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
CVE-2025-48060
jq is a command-line JSON processor. In versions up to and including 1 ...
GHSA-8mxc-vqrq-gcm8
jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.
BDU:2025-06690
Уязвимость функции decNumberCopy функционального языка программирования jq, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:02915-1
Security update for jq
BDU:2025-06686
Уязвимость функции jv_string_vfmt функционального языка программирования jq, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20250724-04
Множественные уязвимости jq
openSUSE-SU-2026:21248-1
Security update for jq
SUSE-SU-2026:4275-1
Security update for jq
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-48060 jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-48060 jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available. | CVSS3: 5.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-48060 jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-48060 jq is a command-line JSON processor. In versions up to and including 1 ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| GHSA-8mxc-vqrq-gcm8 jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c. | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | BDU:2025-06690 Уязвимость функции decNumberCopy функционального языка программирования jq, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | SUSE-SU-2025:02915-1 Security update for jq | 1% Низкий | около 1 года назад | |
| BDU:2025-06686 Уязвимость функции jv_string_vfmt функционального языка программирования jq, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | ROS-20250724-04 Множественные уязвимости jq | CVSS3: 8.1 | больше 1 года назад | |
| openSUSE-SU-2026:21248-1 Security update for jq | 4 месяца назад | ||
| SUSE-SU-2026:4275-1 Security update for jq | около 2 месяцев назад |
Уязвимостей на страницу