CVE-2026-8723

Summary "qs.stringify" throws "TypeError" when called with "arrayFormat: 'comma'" and "encodeValuesOnly: true" on an array containing "null" or "undefined". The throw is synchronous and not handled by any of qs's null-related options "skipNulls", "strictNullHandling". Details In the comma +...