| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-44777 | fixed | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordi ... |
| CVE-2026-43896 | fixed | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded r ... |
| CVE-2026-43895 | fixed | vulnerable | vulnerable | vulnerable | fixed | jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts ... |
| CVE-2026-43894 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | jq is a command-line JSON processor. In 1.8.1 and earlier, when decNum ... |
| CVE-2026-41257 | fixed | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | jq is a command-line JSON processor. In 1.8.1 and earlier, the jq byte ... |
| CVE-2026-41256 | fixed | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level j ... |
| CVE-2026-40164 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6 ... |
| CVE-2026-39979 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | jq is a command-line JSON processor. In commits before 2f09060afab23fe ... |
| CVE-2026-39956 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | jq is a command-line JSON processor. In commits after 69785bf77f86e2ea ... |
| CVE-2026-33948 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18e ... |
| CVE-2026-33947 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | jq is a command-line JSON processor. In versions 1.8.1 and below, func ... |
| CVE-2026-32316 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | jq is a command-line JSON processor. An integer overflow vulnerability ... |