Stephen-dolan
6 CVEs tracked since 2026. Since Apr 2026, none of them reached CISA KEV.
Stephen-dolan CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-04 | 6 | 0 |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 11 or fewer | |
| 2026-11 | 3 or fewer |
Products
The products that kept showing up in Stephen-dolan's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 13 most recently published vulnerabilities affecting Stephen-dolan.
- CVE-2026-33948jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input5.3
- CVE-2026-40164jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed7.5
- CVE-2026-39979jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers6.5
- CVE-2026-39956jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure6.1
- CVE-2026-33947jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()6.2
- CVE-2026-32316jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow8.2
- CVE-2025-9403jqlang jq JSON jq_test.c run_jq_tests assertion3.3
- CVE-2025-49014jq heap use after free vulnerability in f_strflocaltime5.3
- CVE-2025-48060AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)7.5
- CVE-2024-23337jq has signed integer overflow in jv.c:jvp_array_write4.3
- CVE-2024-53427decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonst...8.1
- CVE-2023-50268jq has stack-based buffer overflow in decNaNs6.2
- CVE-2023-50246jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c6.2
The record
- Peak rank
- #195 in Apr 2026
- Busiest month shown
- Apr 2026, 6 CVEs
- Months with a KEV entry
- 0 since Apr 2026
- Monthly snapshots
- 1 since 2026