VULNERABILITY INTELLIGENCE

CVE-2023-50246

CVSS score6.2 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2023-12-13

Last modified2026-06-17

Description

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.