jq | Snyk

Direct Vulnerabilities

Known vulnerabilities in the jq package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Integer Overflow or Wraparound	*
H Out-of-bounds Read	<0:1.7.1-11.el10_2.2
H Predictable from Observable State	<0:1.7.1-11.el10_2.2
H Predictable from Observable State	<0:1.7.1-8.el10_0.3
H Out-of-bounds Read	<0:1.7.1-8.el10_0.3
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Neutralization of Null Byte or NUL Character	*
M Improper Neutralization of Null Byte or NUL Character	*
M Improper Neutralization of Null Byte or NUL Character	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
H Predictable from Observable State	<0:1.7.1-11.el10_1.0.2
H Out-of-bounds Read	<0:1.7.1-11.el10_1.0.2
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
H Predictable from Observable State	<0:1.8.1-3.hum1
M Improper Validation of Specified Type of Input	<0:1.8.1-3.hum1
M Uncontrolled Recursion	<0:1.8.1-3.hum1
L Improper Null Termination	<0:1.8.1-3.hum1
H Out-of-bounds Read	<0:1.8.1-3.hum1
M Improper Validation of Specified Type of Input	*
M Improper Validation of Specified Type of Input	*
L Improper Null Termination	*
H Out-of-bounds Read	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	<0:1.8.1-3.hum1
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
L Reachable Assertion	*
L Reachable Assertion	*
M Buffer Over-read	<0:1.7.1-8.el10_0.1
M Integer Overflow or Wraparound	<0:1.7.1-8.el10_0.1
M Stack-based Buffer Overflow	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*

Vulnerability

Vulnerable Version

Integer Overflow or Wraparound