CVE-2026-47770 affecting package jq for versions less than 1.7.1-7

CVE-2026-47770 affecting package jq for versions less than 1.7.1-7. A patched version of the package is available...

DEBIAN-CVE-2026-47770

jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in denial of service via stack exhaustion uncontrolled recursion. The crash occurs in jq's recursive...

BELL-CVE-2026-47770

Bulletin has no description...