jqlang

jq: Stack Overflow in Recursive Object Merge

jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

jq: stack overflow in module loading on mutual `include`

jq: Wild stack write via signed-integer overflow in decNumber D2U() macro

jq: Embedded NUL truncates top-level jq programs loaded with -f

jq: Stack overflow via unbounded recursion in jv_contains

jq: Signed-int overflow in `stack_reallocate` (jq VM stack)

7 vulnerabilities disclosed & patched in jq

jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers