Vulnerabilities > JQ Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2016-05-06 | CVE-2016-4074 | Allocation of Resources Without Limits or Throttling vulnerability in JQ Project JQ 1.5 The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. | 7.5 |
| 2016-05-06 | CVE-2015-8863 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow. | 9.8 |