721 matches found
Malicious code in require-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7305f50f59db220bfc80a952ab5be573b7d70d3889f37f817d3ef9af46c3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5756 Malicious code in require-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7305f50f59db220bfc80a952ab5be573b7d70d3889f37f817d3ef9af46c3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] Fedora 35 Update: xq-0.0.7-4.fc35
Command line XML beautifier and content extractor. Similar to jq...
[SECURITY] Fedora 35 Update: gojq-0.12.8-3.fc35
Pure Go implementation of jq...
[SECURITY] Fedora 36 Update: xq-0.0.7-4.fc36
Command line XML beautifier and content extractor. Similar to jq...
[SECURITY] Fedora 36 Update: gojq-0.12.8-3.fc36
Pure Go implementation of jq...
Malicious Package
Overview require-jq is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
new packages: jq
An update is available for jq. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0 Relea...
jq bug fix and enhancement update
An update is available for jq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6 Relea...
[SECURITY] Fedora 36 Update: xq-0.0.7-3.fc36
Command line XML beautifier and content extractor. Similar to jq...
[SECURITY] Fedora 34 Update: xq-0.0.7-3.fc34
Command line XML beautifier and content extractor. Similar to jq...
[SECURITY] Fedora 35 Update: xq-0.0.7-3.fc35
Command line XML beautifier and content extractor. Similar to jq...
CVE-2015-8863 affecting package jq for versions less than 1.5-6
CVE-2015-8863 affecting package jq for versions less than 1.5-6. A patched version of the package is available...
CVE-2016-4074 affecting package jq for versions less than 1.5-6
CVE-2016-4074 affecting package jq for versions less than 1.5-6. A patched version of the package is available...
Mageia: Security Advisory (MGASA-2017-0415)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4787-1: jq vulnerability
It was discovered that jq did not perform sufficient bounds checking, resulting in unbounded resource consumption. An attacker could use this vulnerability to cause a denial of service...
CVE-2015-8863 affecting package jq 1.5-6
CVE-2015-8863 affecting package jq 1.5-6. A patched version of the package is available...
CVE-2016-4074 affecting package jq 1.5-6
CVE-2016-4074 affecting package jq 1.5-6. A patched version of the package is available...
One Weird Trick for Reviewing Zeek Logs on the Command Line!
Are you a network security monitoring dinosaur like me? Do you prefer to inspect your Zeek logs using the command line instead of a Web-based SIEM? If yes, try this one weird trick! I store my Zeek logs in JSON format. Sometimes I like to view the output using jq. If I need to search directories ...
