3 matches found
jq: jq: Input validation bypass via embedded NUL bytes allows parser differential attacks
A flaw was found in jq, a command-line JSON processor. This vulnerability allows a remote attacker to bypass input validation by crafting malicious JSON input containing embedded null NUL bytes. Due to incorrect handling of input buffer lengths, jq truncates the input at the first NUL byte,...
6.3CVSS7AI score0.00256EPSS
SaveExploits1References6
20