CyberICT

CVE-2026-43895

Microsoft · Published May 13, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts. jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

Affected Products

  • azl3 jq 1.7.1-5 on Azure Linux 3.0
  • azl3 jq 1.7.1-6 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N