All products

Red Hat Ceph Storage 4/jq

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
jq: jq has signed integer overflow in jv.c:jvp_array_writeCVE-2024-23337 Red Hat Ansible Automation Platform 2/automation-controllerRed Hat Ceph Storage 4/jq Red Hat Medium No fix reported
jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)CVE-2025-48060 Red Hat Ansible Automation Platform 2/automation-controllerRed Hat Ceph Storage 4/jq Red Hat Medium No fix reported
jq: assertion failure in run_jq_tests() of the file jq_test.cCVE-2025-9403 Red Hat Ansible Automation Platform 2/automation-controllerRed Hat Ceph Storage 4/jq Red Hat Low No fix reported
jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflowCVE-2026-32316 Red Hat Ansible Automation Platform 2/automation-controllerRed Hat Ansible Automation Platform 2/redhat-user-workloads/controller-rhel9 Red Hat Medium No fix reported
jq: unbounded Recursion in jv_setpath() / jv_getpath() / delpaths_sorted()CVE-2026-33947 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: missing runtime type checks for _strindices lead to crash and limited memory disclosureCVE-2026-39956 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffersCVE-2026-39979 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ceph Storage 4/jq Red Hat High No fix reported
jq: signed-int overflow in stack_reallocateCVE-2026-41257 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: stack overflow via unbounded recursion in jv_containsCVE-2026-40612 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: embedded NUL truncates top-level jq programs loaded with -fCVE-2026-41256 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer OverflowCVE-2026-43894 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: stack overflow in module loading on mutual includeCVE-2026-44777 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifactsCVE-2026-43895 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: stack overflow in recursive object mergeCVE-2026-43896 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systemsCVE-2026-54679 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: jq: Heap out-of-bounds write via oversized raw file processingCVE-2026-49839 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: jq: Denial of Service via deeply nested array comparisonCVE-2026-47770 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported