Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

jqlang Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-47770`jq: stack overflow in deep structural equality	Exploitation statusNot known exploited	FixYes	Affected productjq	Published06/25/2026	SeverityMedium
`CVE-2026-49839`jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow	Exploitation statusPublic exploit	FixYes	Affected productjq	Published06/25/2026	SeverityHigh
`CVE-2026-54679`jq: potential integer overflow in jvp_string_append	Exploitation statusNot known exploited	FixYes	Affected productjq	Published06/25/2026	SeverityMedium
`CVE-2026-43896`jq: Stack Overflow in Recursive Object Merge	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-43895`jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-44777`jq: stack overflow in module loading on mutual `include`	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-43894`jq: Wild stack write via signed-integer overflow in decNumber D2U() macro	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-41256`jq: Embedded NUL truncates top-level jq programs loaded with -f	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-40612`jq: Stack overflow via unbounded recursion in jv_contains	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-41257`jq: Signed-int overflow in `stack_reallocate` (jq VM stack)	Exploitation statusNot known exploited	FixNot confirmed	Affected productjq	Published05/11/2026	SeverityMedium
`CVE-2026-33948`jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input	Exploitation statusPublic exploit	FixYes	Affected productjq	Published04/13/2026	SeverityLow
`CVE-2026-40164`jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed	Exploitation statusPublic exploit	FixYes	Affected productjq	Published04/13/2026	SeverityHigh
`CVE-2026-39979`jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers	Exploitation statusPublic exploit	FixYes	Affected productjq	Published04/13/2026	SeverityMedium
`CVE-2026-39956`jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure	Exploitation statusPublic exploit	FixYes	Affected productjq	Published04/13/2026	SeverityMedium
`CVE-2026-33947`jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published04/13/2026	SeverityMedium
`CVE-2026-32316`jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published04/13/2026	SeverityHigh
`CVE-2025-9403`jqlang jq JSON jq_test.c run_jq_tests assertion	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published08/25/2025	SeverityMedium
`CVE-2025-49014`jq heap use after free vulnerability in f_strflocaltime	Exploitation statusPublic exploit	FixYes	Affected productjq	Published06/19/2025	SeverityMedium
`CVE-2025-48060`AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/21/2025	SeverityHigh
`CVE-2024-23337`jq has signed integer overflow in jv.c:jvp_array_write	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published05/21/2025	SeverityMedium
`CVE-2024-53427`	Exploitation statusPublic exploit	FixNot confirmed	Affected productjq	Published02/26/2025	SeverityHigh
`CVE-2023-50268`jq has stack-based buffer overflow in decNaNs	Exploitation statusNot confirmed	FixNot confirmed	Affected productjq	Published12/13/2023	SeverityMedium
`CVE-2023-50246`jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c	Exploitation statusNot known exploited	FixNot confirmed	Affected productjq	Published12/13/2023	SeverityMedium
`CVE-2023-49355`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published12/11/2023	SeverityHigh

24 / 24 Results

All vulnerabilities loaded

Security vulnerabilities from jqlang

jqlang

How many security vulnerabilities does jqlang have?

Which jqlang product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular jqlang products

jq