CVE-2023-50268 (published 2023-12-13T20:49:54.982Z)
jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue.
Affected products: Vendor: jqlang
Product: jq
Versions: = 1.7