Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

Summary

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.

Remediation

1. Inventory every Red Hat Red Hat Enterprise Linux 10 deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://access.redhat.com/security/cve/CVE-2026-120194
• Referencehttps://bugzilla.redhat.com/show_bug.cgi?id=2564418
• Referencehttps://gitlab.gnome.org/GNOME/json-glib/-/issues/96