A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0931-1 advisory.

    This update for jq fixes the following issue:

    - CVE-2025-9403: test suite assertion failure in JSON parsing consistency validation (bsc#1248600).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0759 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-9403:
    A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file     jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack     requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might     be affected as well.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file     jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack     requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might     be affected as well. (CVE-2025-9403)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
303145	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jq (SUSE-SU-2026:0931-1)	Nessus	SuSE Local Security Checks	medium
271105	TencentOS Server 4: jq (TSSA-2025:0759)	Nessus	Tencent Local Security Checks	high
260410	Linux Distros Unpatched Vulnerability : CVE-2025-9403	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-9403

medium

Tenable Plugins

medium

high

medium