- CVE-2026-33948: fix NUL truncation in JSON parser (validation bypass) - CVE-2026-33947: fix unbounded recursion in jv_setpath/jv_getpath/delpaths - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports - CVE-2026-47770: guard deep structural equality and comparison recursion - CVE-2024-53427: reject NaN with payload in jvp_literal_number_new() - CVE-2025-9403: replace reparse assertion in run_jq_tests() with a test failure