CVE-2026-47770 | jqlang jq up to 1.8.1 src/jv.c jvp_array_equal recursion

June 25, 2026 Yanac

A vulnerability has been found in jqlang jq up to 1.8.1 and classified as problematic. This issue affects the function jvp_array_equal of the file src/jv.c. Performing a manipulation results in uncontrolled recursion.

This vulnerability is identified as CVE-2026-47770. The attack is only possible with local access. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More