CVE-2026-39979

The command-line JSON processor jq is vulnerable to an out-of-bounds read in the jv_parse_sized() API within libjq . The root cause is that the error-handling path uses %s in jv_string_fmt(), which reads until a NUL terminator is encountered instead of respecting the caller-supplied buffer length...