CLEANSTART-2026-CN37175: jq is a command-line JSON processor

Q: What access and conditions are required to exploit this issue?

Exploitation requires local access and user interaction. The attack complexity is rated low, and no privileges are required.

Q: What is the expected security impact?

The vulnerability is rated as having high availability impact. The provided vector indicates no confidentiality or integrity impact.

Q: Who should prioritize triage?

Systems that have the affected jq package installed and where a local attacker can cause a user to interact with malicious input should prioritize investigation. The supplied data does not identify affected versions, fixed versions, or mitigations.

Published Nov 5, 2026

Updated

Security vulnerability affects the jq package. jq is a command-line JSON processor.

Affected Software

1 affected componentFixes available

cleanstart/jq<1.8.0-r0

1.8.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/jq to a version that resolves this vulnerability.
Fixed in 1.8.0-r0

Event History

Nov 5, 2026

Advisory Published

via OSV·06:31 AM

Data Sourced

via OSV·06:31 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-54679

Frequently Asked Questions

What access and conditions are required to exploit this issue?

Exploitation requires local access and user interaction. The attack complexity is rated low, and no privileges are required.

What is the expected security impact?

The vulnerability is rated as having high availability impact. The provided vector indicates no confidentiality or integrity impact.

Who should prioritize triage?

Systems that have the affected jq package installed and where a local attacker can cause a user to interact with malicious input should prioritize investigation. The supplied data does not identify affected versions, fixed versions, or mitigations.

CLEANSTART-2026-CN37175: jq is a command-line JSON processor

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access and conditions are required to exploit this issue?

What is the expected security impact?

Who should prioritize triage?

Company

Resources

Contact

Frequently Asked Questions

What access and conditions are required to exploit this issue?

What is the expected security impact?

Who should prioritize triage?