CVE-2026-54679

Description

References

• jqlang/jq security advisory · Vendor Advisory

jq의 다른 취약점

• CVE-2026-49839높음 7.1jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a…
• CVE-2026-47770보통 5.5jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C sta…
• CVE-2026-44777보통 5.5jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise…
• CVE-2026-43896보통 5.5jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded recursion in jv_object_merge_recursive() allows a crafted jq program to…
• CVE-2026-43895보통 4.4jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later…