CVE-2016-4074 affecting package jq for versions less than 1.5-6
Details
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. This issue has been fixed in jq 1.6_rc1-r0.