Suricata is a complex piece of software dealing with mostly untrusted input. Mishandling this input will have serious consequences:
In other words, we think the stakes are pretty high, especially since in many common cases the IDS/IPS will be directly reachable by an attacker.