CVE-2025-9403

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function runjqtests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

References

Affected packages

Git / github.com/jqlang/jq

Affected ranges

Type

GIT

Repo

https://github.com/jqlang/jq

Events

Introduced

Last affected

2e01ff1fb69609540b2bdc4e62a60499f2b2fb8e

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6"
        }
    ]
}

Affected versions

1.*

1.6rc2

jq-1.*

jq-1.0

jq-1.1

jq-1.2

jq-1.3

jq-1.4

jq-1.5rc1

jq-1.5rc2

jq-1.6

jq-1.6rc1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9403.json"