jqlang Jq any version

jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).

AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow

jq: potential integer overflow in jvp_string_append

jq: stack overflow in deep structural equality

jq has signed integer overflow in jv.c:jvp_array_write

jq: Signed-int overflow in `stack_reallocate` (jq VM stack)

jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()

jq: Wild stack write via signed-integer overflow in decNumber D2U() macro

jq: Stack Overflow in Recursive Object Merge

jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure

jqlang jq JSON jq_test.c run_jq_tests assertion

jq: Stack overflow via unbounded recursion in jv_contains

jq: stack overflow in module loading on mutual `include`

jq: Embedded NUL truncates top-level jq programs loaded with -f

jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts