Changes for version 2.51 - 2026-09-12

  • Fix CVE-2026-78497: avoid string eval when compiling user-supplied regular expressions, preventing Perl code execution through runtime regex constructs such as (?{ ... }).
  • Add regression coverage ensuring runtime Perl code embedded in regular expressions is rejected without being executed.
  • Preserve support for the i, m, s, and x regex flags.
  • Bump module version to 2.51.

Documentation

minimal jq-style JSON filter (pure Perl)

Modules

jq-compatible JSON query engine in pure Perl (no external binaries)
structured exceptions for the JQ::Lite Library API

Provides

in lib/JQ/Lite/Error.pm
in lib/JQ/Lite/Error.pm
in lib/JQ/Lite/Error.pm
in lib/JQ/Lite/Expression.pm
in lib/JQ/Lite/Filters.pm
in lib/JQ/Lite/Parser.pm
in lib/JQ/Lite/Util.pm
in lib/JQ/Lite/Util/Parsing.pm
in lib/JQ/Lite/Util/Paths.pm
in lib/JQ/Lite/Util/Transform.pm