10 matches found
EUVD-2026-101710
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString DoS...
UBUNTU-CVE-2026-110816
Summary qs.stringify with arrayFormat: 'comma' throws TypeError: Cannot convert object to primitive value when an array element cannot be coerced to a string, such as an object with an own non-callable toString "toString": "x" or a null-prototype object. The comma format joins array elements with...
PT-2026-122677
Summary qs.stringify with arrayFormat: 'comma' throws TypeError: Cannot convert object to primitive value when an array element cannot be coerced to a string, such as an object with an own non-callable toString "toString": "x" or a null-prototype object. The comma format joins array elements with...
Malicious code in @toprimitive/nif (npm)
--- Credit: OpenSSF source...
MAL-2026-7096 Malicious code in @toprimitive/nif (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @toprimitive/nif (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-62494
A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...
UBUNTU-CVE-2025-62494
A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...