mirror of
https://github.com/jqlang/jq.git
synced 2026-10-12 02:16:58 +00:00
itchyny
f58787c418
jq used to recurse without bound on mutual or self-referential `import` declarations, exhausting the stack. Track each library's load state with a `loading` flag set before its dependencies are processed; a recursive reference to an in-progress library now reports "circular import of X". Fixes CVE-2026-44777.
3 lines
39 B
Plaintext
3 lines
39 B
Plaintext
import "cycle_self" as s;
|
|
def f: null;
|