Skip to content
fr Sign in
5.5 Medium

CVE-2025-49014 jq is a command-line JSON processor

Description

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication.

Affected products and versions

Product Affected versions Fixed in
jq 1.8.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of jq

The 23 CVEs of jq →
CVE-2026-47770 jq is a command-line JSON processor 6.8 Medium CVE-2026-49839 jq is a command-line JSON processor 7.1 High CVE-2026-54679 jq is a command-line JSON processor 6.9 Medium CVE-2026-43896 jq is a command-line JSON processor 6.2 Medium
Track this CVE