← All advisories

Medium severity6.2NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026

CVE-2023-50246

CVE-2023-50246

Description

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Jqlang/Jq5 versions
cpe:2.3:a:jqlang:jq:1.7:-:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:jqlang:jq:1.7:-:*:*:*:*:*:*
- cpe:2.3:a:jqlang:jq:1.7:rc1:*:*:*:*:*:*
- cpe:2.3:a:jqlang:jq:1.7:rc2:*:*:*:*:*:*
- (no CPE)range: <1.7.1
- (no CPE)range: = 1.7
osv-coords
pkg:rpm/opensuse/jq&distro=openSUSE%20Tumbleweed
Range: < 1.7.1-1.1

Patches

Vulnerability mechanics

References

4

www.openwall.com/lists/oss-security/2023/12/15/10nvdMailing ListPatchThird Party Advisory
github.com/jqlang/jq/commit/71c2ab509a8628dbbad4bc7b3f98a64aa90d3297nvdPatch
github.com/jqlang/jq/security/advisories/GHSA-686w-5m7m-54vcnvdExploitVendor Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdMailing List

News mentions

0

No linked articles in our index yet.