{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\njq:\n  * jq-1.8.2-0.1.hum1 (aarch64, x86_64)\n  * jq-devel-1.8.2-0.1.hum1 (aarch64, x86_64)\n  * jq-1.8.2-0.1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:29986",
        "url": "https://access.redhat.com/errata/RHSA-2026:29986"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43895",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43895"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41256",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41256"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41257",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41257"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43896",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43896"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40612",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40612"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47770",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47770"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43894",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43894"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29986.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-06-27T08:44:55+00:00",
      "generator": {
        "date": "2026-06-27T08:44:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2026:29986",
      "initial_release_date": "2026-06-25T15:16:12+00:00",
      "revision_history": [
        {
          "date": "2026-06-25T15:16:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-26T14:09:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-27T08:44:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jq-main@aarch64",
                "product": {
                  "name": "jq-main@aarch64",
                  "product_id": "jq-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jq@1.8.2-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jq-main@src",
                "product": {
                  "name": "jq-main@src",
                  "product_id": "jq-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jq@1.8.2-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jq-main@x86_64",
                "product": {
                  "name": "jq-main@x86_64",
                  "product_id": "jq-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jq@1.8.2-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jq-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:jq-main@aarch64"
        },
        "product_reference": "jq-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jq-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:jq-main@src"
        },
        "product_reference": "jq-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jq-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:jq-main@x86_64"
        },
        "product_reference": "jq-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40612",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2026-05-11T18:02:00.323406+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2469183"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor. The `jv_contains` function does not have a depth limit when processing nested arrays or objects. This missing depth limit allows an attacker who can supply a sufficiently nested input structure to exhaust the stack memory, causing an application crash and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: stack overflow via unbounded recursion in jv_contains",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to supply a crafted JSON input to be processed by jq with the `jv_contains` function. This allows the attacker to cause an application crash with no other security impact. Due to these reasons, this vulnerability has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40612"
        },
        {
          "category": "external",
          "summary": "RHBZ#2469183",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469183"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40612",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40612"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40612",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40612"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-r7m6-x9c7-h69j",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-r7m6-x9c7-h69j"
        }
      ],
      "release_date": "2026-05-11T17:16:25.453000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted input with the jq command line JSON processor.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: stack overflow via unbounded recursion in jv_contains"
    },
    {
      "cve": "CVE-2026-41256",
      "cwe": {
        "id": "CWE-158",
        "name": "Improper Neutralization of Null Byte or NUL Character"
      },
      "discovery_date": "2026-05-11T18:02:30.119017+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2469193"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor. Top-level jq programs loaded from a file using the `-f` flag are truncated at the first embedded NUL byte. This issue allows an attacker who can supply a crafted filter file to prematurely truncate the program, potentially bypassing filtering logic and modifying the integrity of the processed data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: embedded NUL truncates top-level jq programs loaded with -f",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply a crafted filter file containing an embedded NUL byte to be loaded by jq using the `-f` flag. This allows the attacker to prematurely truncate the program, potentially bypassing intended filtering logic and modifying the integrity of the processed data. Due to these reasons, this issue has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41256"
        },
        {
          "category": "external",
          "summary": "RHBZ#2469193",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469193"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41256",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41256"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41256",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41256"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-vf2h-chrj-q3fg",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-vf2h-chrj-q3fg"
        }
      ],
      "release_date": "2026-05-11T17:18:30.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted filter files using the -f flag with the jq command line JSON processor.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: embedded NUL truncates top-level jq programs loaded with -f"
    },
    {
      "cve": "CVE-2026-41257",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-11T18:02:12.992356+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2469187"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor. The memory allocation size is calculated using a signed integer that can overflow when processing deeply nested generator forks. This integer overflow allows an attacker who can supply a sufficiently nested input to influence the memory allocation size, causing an out-of-bounds write and an application crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: signed-int overflow in stack_reallocate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to supply a crafted JSON input to be processed by jq that triggers deeply nested generator forks. This allows the attacker to overflow the integer used to calculate memory size and cause an out-of-bounds write, effectively resulting in an application crash with no other security impact. Due to these reasons, this vulnerability has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41257"
        },
        {
          "category": "external",
          "summary": "RHBZ#2469187",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469187"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41257",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41257"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41257",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41257"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-4jm8-m363-4539",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-4jm8-m363-4539"
        }
      ],
      "release_date": "2026-05-11T17:14:32.579000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted input with the jq command line JSON processor.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: signed-int overflow in stack_reallocate"
    },
    {
      "cve": "CVE-2026-43894",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-11T18:01:34.839506+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2469175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a tool used for processing JSON data from the command line. A remote attacker can exploit a vulnerability by providing a specially crafted large number as input. This can cause an internal calculation error, leading to a memory overflow where the attacker can write their own data into the system\u0027s memory, potentially resulting in the application crashing (Denial of Service).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43894"
        },
        {
          "category": "external",
          "summary": "RHBZ#2469175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43894",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43894"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43894",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43894"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-5v7p-2r57-2g4g",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-5v7p-2r57-2g4g"
        }
      ],
      "release_date": "2026-05-11T17:20:06.055000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow"
    },
    {
      "cve": "CVE-2026-43895",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2026-05-11T18:02:49.442174+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2469199"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor. Embedded NUL bytes in import paths are truncated during module and data-file lookup, creating a mismatch between the intended import string and the actual file path opened. This issue allows an attacker who can supply a crafted script to access unintended files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply a crafted script containing embedded NUL bytes in import paths to be processed by jq. This allows the attacker to bypass intended path validation mechanisms and access unintended files. Due to these reasons, this issue has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43895"
        },
        {
          "category": "external",
          "summary": "RHBZ#2469199",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469199"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43895",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43895"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43895",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43895"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-7q7g-mrq3-phxr",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-7q7g-mrq3-phxr"
        }
      ],
      "release_date": "2026-05-11T17:24:02.880000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted scripts with the jq command line JSON processor.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts"
    },
    {
      "cve": "CVE-2026-43896",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2026-05-11T18:02:03.588021+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2469184"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor. The `jv_object_merge_recursive` function, reachable via the `*` operator when both operands are objects, does not have a depth limit when processing nested objects. This missing depth limit allows an attacker who can supply a sufficiently nested input structure to exhaust the stack memory, causing an application crash and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: stack overflow in recursive object merge",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to supply a crafted JSON input to be processed by jq with the `jv_object_merge_recursive` function, reachable via the `*` operator when both operands are objects. This allows the attacker to cause an application crash with no other security impact. Due to these reasons, this vulnerability has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43896"
        },
        {
          "category": "external",
          "summary": "RHBZ#2469184",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469184"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43896",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43896"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43896",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43896"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-mg96-6h3q-g846",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-mg96-6h3q-g846"
        }
      ],
      "release_date": "2026-05-11T17:24:48.149000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted input with the jq command line JSON processor.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: stack overflow in recursive object merge"
    },
    {
      "cve": "CVE-2026-47770",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-25T18:02:08.763512+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493034"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. This vulnerability allows a local user or an attacker providing malicious input to cause a denial of service (DoS) by comparing two sufficiently deeply nested arrays using the \u0027==\u0027 operator. This action exhausts the C stack due to uncontrolled recursion, leading to a crash of the jq process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via deeply nested array comparison",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47770"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493034",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493034"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47770",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47770"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47770",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47770"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-3pgx-frr7-3jxp",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-3pgx-frr7-3jxp"
        }
      ],
      "release_date": "2026-06-25T17:22:21.531000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: jq: Denial of Service via deeply nested array comparison"
    },
    {
      "cve": "CVE-2026-54679",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-06-25T18:01:50.223402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. On 32-bit systems, a local attacker could exploit an integer overflow vulnerability in the `jvp_string_append` function. This could lead to a massive buffer overrun, resulting in a denial of service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:jq-main@aarch64",
          "Red Hat Hardened Images:jq-main@src",
          "Red Hat Hardened Images:jq-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54679"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-29gj-222p-j7vx",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-29gj-222p-j7vx"
        }
      ],
      "release_date": "2026-06-25T17:16:18.072000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T15:16:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29986"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:jq-main@aarch64",
            "Red Hat Hardened Images:jq-main@src",
            "Red Hat Hardened Images:jq-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems"
    }
  ]
}