fr Sign in

6.2 Medium

CVE-2023-50246 jq is a command-line JSON processor

Description

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.

Affected products and versions

Product	Affected versions	Fixed in
jq	1.7	No fix stated

References

github.com github.com
github.com github.com
bugs.chromium.org bugs.chromium.org
www.openwall.com www.openwall.com

Timeline

Published December 13, 2023
Last modified February 13, 2025

The 23 CVEs of jq →

CVE-2026-47770 jq is a command-line JSON processor 6.8 Medium CVE-2026-49839 jq is a command-line JSON processor 7.1 High CVE-2026-54679 jq is a command-line JSON processor 6.9 Medium CVE-2026-43896 jq is a command-line JSON processor 6.2 Medium

Track this CVE