textproc/jq and oniguruma5
xavi.garcia at gmail.com
Thu Jul 13 10:47:39 UTC 2017
jq depends on oniguruma5 but this library has quite a few vulnerabilities
and it doesn't seem to be maintained.
Would it be possible to change the dependencies in textproc/jq
from devel/oniguruma5 to devel/oniguruma6?
There's already a bug report but no action has been taken yet.
More information about the freebsd-ports