jq vulnerabilities (Alpaquita)
23 vulnerabilities.
jqAlpaquitajq: potential integer overflow in jvp_string_append6.9 MediumjqAlpaquitajq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow7.1 HighjqAlpaquitajq: stack overflow in deep structural equality6.8 MediumjqAlpaquitajq: Stack Overflow in Recursive Object Merge6.2 MediumjqAlpaquitajq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts4.4 MediumjqAlpaquitajq: stack overflow in module loading on mutual `include`5.4 MediumjqAlpaquitajq: Wild stack write via signed-integer overflow in decNumber D2U() macro6.2 MediumjqAlpaquitajq: Embedded NUL truncates top-level jq programs loaded with -f5.5 MediumjqAlpaquitajq: Stack overflow via unbounded recursion in jv_contains5.4 MediumjqAlpaquitajq: Signed-int overflow in `stack_reallocate` (jq VM stack)6.4 MediumjqAlpaquitajq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input2.9 LowjqAlpaquitajq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed7.5 HighjqAlpaquitajq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers6.9 MediumjqAlpaquitajq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure6.1 MediumjqAlpaquitajq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()6.2 MediumjqAlpaquitajq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow8.2 HighjqAlpaquitajqlang jq JSON jq_test.c run_jq_tests assertion4.8 MediumjqAlpaquitajq heap use after free vulnerability in f_strflocaltime5.5 MediumjqAlpaquitaAddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)7.7 HighjqAlpaquitajq has signed integer overflow in jv.c:jvp_array_write4.3 MediumjqAlpaquitajq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.8.1 HighjqAlpaquitajq has stack-based buffer overflow in decNaNs6.2 MediumjqAlpaquitajq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c6.2 Medium