CVE-2026-78497 | JQ::Lite up to 2.50 Regular Expression test/match/select query code injection

October 18, 2026 Yanac

A vulnerability was found in JQ::Lite up to 2.50. It has been rated as critical. Affected by this vulnerability is the function test/match/select of the component Regular Expression. This manipulation of the argument Query causes code injection.

The identification of this vulnerability is CVE-2026-78497. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More