jq CVE-2026-40612

Upgrade jq to version 1.8.2 or later when released by the jqlang project. Check the GitHub repository (https://github.com/jqlang/jq) for the latest stable release. Until patching is possible, apply strict input validation to reject JSON structures with nesting depth exceeding a safe threshold (e.g., 100-500 levels depending on system stack size) before passing them to jq. Deploy jq in restrictive execution environments (containers with reduced stack size, seccomp profiles limiting recursion) to limit the blast radius of stack exhaustion. Avoid exposing jq as a public-facing service that processes untrusted JSON; if unavoidable, implement a timeout and resource limit wrapper around jq execution to kill processes that consume excessive CPU or trigger stack exceptions.