CVE-2026-43895: falha de média gravidade em jqlang jq
jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.4epss 0.2%
jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C string operations during module and data-file lookup. This creates a mismatch between the logical import string that policy or audit code may validate and the on-disk path that jq actually opens.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
jqlang · jqCVEs relacionadas — jqlang jq
No mesmo produto, das mais perigosas para as menos.
CVE-2026-32316HIGHjq: Integer overflow in jvp_string_append() allows Heap-based Buffer OverflowEPSS 0.8%CVE-2026-39979MEDIUMjq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted BuffersEPSS 0.6%CVE-2025-48060HIGHAddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)EPSS 0.6%CVE-2023-50246MEDIUMjq has heap-buffer-overflow vulnerability in the function decToString in decNumber.cEPSS 0.5%CVE-2024-23337MEDIUMjq has signed integer overflow in jv.c:jvp_array_writeEPSS 0.5%CVE-2023-50268MEDIUMjq has stack-based buffer overflow in decNaNsEPSS 0.4%