CVE-2026-39979 — jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

jq contains an out-of-bounds read vulnerability in jv_parse_sized() when formatting errors for non-NUL-terminated counted buffers. The vulnerability is classified as CWE-125.