2 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-82562
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma- separated value under a bracket-push key a=1,2,3,4 is split into an...
7.5CVSS5.7AI score0.00496EPSS
SaveExploits1References4
Denial Of Service (DoS)
qs is vulnerable to Denial of Service DoS. The vulnerability is due to parseArrayValue returning val.split',' before enforcing arrayLimit, allowing attackers to supply a comma-heavy parameter that creates arbitrarily large arrays in memory without triggering throwOnLimitExceeded, leading to...
7.5CVSS5.6AI score0.00496EPSS
SaveExploits1References2Affected Software1
20