Search CVE reports
31 – 40 of 26527 results
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
1 affected package
jq
| Package | 26.04 LTS |
|---|---|
| jq | Needs evaluation |
jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded recursion in jv_object_merge_recursive() allows a crafted jq program to crash the process with a segfault. The function is reachable through the * operator when...
1 affected package
jq
| Package | 26.04 LTS |
|---|---|
| jq | Needs evaluation |
jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C string operations during module and data-file lookup. This...
1 affected package
jq
| Package | 26.04 LTS |
|---|---|
| jq | Needs evaluation |
jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX-1 (2147483646) digits, the D2U() macro overflows during signed-int arithmetic. The wrapped negative value...
1 affected package
jq
| Package | 26.04 LTS |
|---|---|
| jq | Needs evaluation |
jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in a signed int. When the stack grows beyond ≈1 GiB (via deeply nested generator forks), the doubling arithmetic...
1 affected package
jq
| Package | 26.04 LTS |
|---|---|
| jq | Needs evaluation |
jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by \x00...
1 affected package
jq
| Package | 26.04 LTS |
|---|---|
| jq | Needs evaluation |
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php. This issue affects MediaWiki: from * before 1.43.7,...
1 affected package
mediawiki
| Package | 26.04 LTS |
|---|---|
| mediawiki | Needs evaluation |
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
1 affected package
mediawiki
| Package | 26.04 LTS |
|---|---|
| mediawiki | Needs evaluation |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Specials/SpecialUserRights.Php. This issue affects...
1 affected package
mediawiki
| Package | 26.04 LTS |
|---|---|
| mediawiki | Needs evaluation |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue affects MediaWiki: from * before...
1 affected package
mediawiki
| Package | 26.04 LTS |
|---|---|
| mediawiki | Needs evaluation |