CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure