Astra Linux – vulnerability in jq

jq is a command-line JSON processor. In versions 1.8.1 and earlier, the functions jvsetpath, jvgetpath, and delpathssorted in jq’s src/jvaux.c utilize unbounded recursion; the recursion depth is determined solely by the length of an array passed as a path argument by the caller, with no depth lim...