CVE Tools
Track your stack

Jqlang

13 CVEs tracked since 2026. Since Apr 2026, none of them reached CISA KEV.

Jqlang CVEs per month

Apr 2026 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Jqlang CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0460
2026-0570
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-113 or fewer

Products

The products that kept showing up in Jqlang's monthly top three, with their CVEs summed over those months.

  1. Jq132 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Jqlang.

  1. CVE-2026-47770jq: stack overflow in deep structural equality5.5
  2. CVE-2026-49839jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow7.1
  3. CVE-2026-54679jq: potential integer overflow in jvp_string_append5.5
  4. CVE-2026-43896jq: Stack Overflow in Recursive Object Merge6.2
  5. CVE-2026-43895jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts4.4
  6. CVE-2026-44777jq: stack overflow in module loading on mutual `include`5.5
  7. CVE-2026-43894jq: Wild stack write via signed-integer overflow in decNumber D2U() macro6.2
  8. CVE-2026-41256jq: Embedded NUL truncates top-level jq programs loaded with -f5.5
  9. CVE-2026-40612jq: Stack overflow via unbounded recursion in jv_contains5.5
  10. CVE-2026-41257jq: Signed-int overflow in `stack_reallocate` (jq VM stack)5.5
  11. CVE-2026-33948jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input5.3
  12. CVE-2026-40164jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed7.5
  13. CVE-2026-39979jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers6.5
  14. CVE-2026-39956jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure6.1
  15. CVE-2026-33947jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()6.2

The record

Peak rank
#180 in Apr 2026
Busiest month shown
May 2026, 7 CVEs
Months with a KEV entry
0 since Apr 2026
Monthly snapshots
2 since 2026
Jqlang's full record, month by month