Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/11 5:18 p.m.66 views

CVE-2026-41256 jq: Embedded NUL truncates top-level jq programs loaded with -f

jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by \x00 and arbitrary suffix compiles and executes as only the prefix before...

5.5CVSS0.00158EPSS
SaveExploits1References1
Rows per page
Query Builder