qs 代码问题漏洞

🗓️ 17 May 2026 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 11 Views

QS vulnerabilities 6.11.1–6.15.2 cause a TypeError in qs.stringify for arrays with null or undefined when arrayFormat is comma and encodeValuesOnly.

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in qs-6.14.2.tgz	9 Jun 202614:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps	9 Jul 202601:28	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in qs	7 Jul 202610:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	10 Jul 202612:21	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	12 Jun 202601:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules (CVE-2026-45736, CVE-2026-45149, CVE-2026-3449 & CVE-2026-8723)	29 Jun 202607:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	10 Jul 202612:21	–	ibm
ATTACKERKB	CVE-2026-8723	16 May 202623:21	–	attackerkb
BDU FSTEC	The vulnerability of the qs.stringify() function in the string query analysis and transformation library allows a attacker to cause a service failure.	31 Jul 202600:00	–	bdu_fstec

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-8723

02 Jun 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3

CVSS 46.3

EPSS0.00358

SSVC

query string library javascript library array with null array with undefined array format comma encode values only version range