HIGH

[NEU] [mittel] jq: Mehrere Schwachstellen ermöglichen Denial of Service

BSI Germany • May 26, 2026

HIGH

RHSA-2026:19151: Important: jq security update

Red Hat Errata • May 19, 2026

MEDIUM

CVE-2026-41257 jq: Signed-int overflow in `stack_reallocate` (jq VM stack)

Microsoft Security Response Center • May 13, 2026

MEDIUM

CVE-2026-33947 jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()

Microsoft Security Response Center • Apr 17, 2026

HIGH

CVE-2026-32316 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

Microsoft Security Response Center • Apr 17, 2026

MEDIUM

CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure

Microsoft Security Response Center • Apr 17, 2026

HIGH

CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Microsoft Security Response Center • Apr 17, 2026

LOW

CVE-2026-33948 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

Microsoft Security Response Center • Apr 17, 2026