Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-50268
6.2
MEDIUMCVSS v3
Published
December 13, 2023
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue.
GitHub