5.4
Medium
CVE-2026-44777 jq is a command-line JSON processor
Description
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jq 1.8 | earliest → 1.8.2rc1 | No fix stated |
References
- github.com github.com
Timeline
- Published
- Last modified