Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/11 5:16 p.m.9 views

CVE-2026-40612 jq: Stack overflow via unbounded recursion in jv_contains

jq is a command-line JSON processor. In 1.8.1 and earlier, jvcontains recurses into nested arrays/objects with no depth limit. With a sufficiently nested input structure built programmatically with reduce, since the JSON parser caps at depth 10000, the C stack is exhausted...

6.8CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder