Lucene search
+L

2 matches found

Debian
Debian
added 2026/05/17 3:53 p.m.32 views

[BSA-134] Security Update for jq

ChangZhuo Chen uploaded new packages for jq which fixed the following security problems: CVE-2026-32316 jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and jvpstringcopyreplacebad functions, where concatenating strings...

8.2CVSS6.2AI score0.00559EPSS
SaveExploits12
Vulnrichment
Vulnrichment
added 2026/04/13 5:49 p.m.1 views

CVE-2026-32316 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and jvpstringcopyreplacebad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer...

8.2CVSS6.1AI score0.00484EPSS
SaveExploits1References2
Rows per page
Query Builder