CVE-2025-9403

ADVISORY - nist

Summary

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

EPSS Score⁠: 0.00031 (0.084)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-617⁠

Reachable Assertion

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.