Skip to content
fr Sign in
6.9 Medium

CVE-2026-54679 jq is a command-line JSON processor

Description

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2.

Affected products and versions

Product Affected versions Fixed in
jq 1.8 earliest → < 1.8.2 1.8.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of jq

The 23 CVEs of jq →
CVE-2026-47770 jq is a command-line JSON processor 6.8 Medium CVE-2026-49839 jq is a command-line JSON processor 7.1 High CVE-2026-43896 jq is a command-line JSON processor 6.2 Medium CVE-2026-43895 jq is a command-line JSON processor 4.4 Medium
Track this CVE