A vulnerability categorized as problematic has been discovered in jqlang jq up to 1.8.1. The impacted element is the function
jv_setpath/jv_getpath/delpaths_sorted of the file src/jv_aux.c. Executing a manipulation of the argument path can lead to uncontrolled recursion.
This vulnerability is tracked as CVE-2026-33947. The attack is restricted to local execution. No exploit exists.
Applying a patch is advised to resolve this issue.
