medium5.5
CVE-2026-44777
jq is a command-line JSON processor.
Impact
jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jqlang | Jq | through 1.8.2 |