A vulnerability has been found in jqlang jq up to 1.8.1 and classified as problematic. Affected by this issue is the function D2U. Performing a manipulation results in integer overflow. This vulnerability is known as CVE-2026-43894. Attacking locally is a requirement.
| Vendor | Product | Versions |
|---|---|---|
| jqlang | jq | <= 1.8.1 |
Updated description with new details and confirmed no exploit is available.
Initial creation
