Skip to content
5.4 Medium

CVE-2026-44777 jq is a command-line JSON processor

Description

jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.

Affected products and versions

Product Affected versions Fixed in
jq 1.8 earliest → 1.8.2rc1 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 23 CVEs of jq →
Track this CVE