60 matches found
AZL-98331 CVE-2026-82417 affecting package js-jquery 3.5.0-4
Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...
6.3CVSS5.9AI score0.00261EPSS
SaveExploits0References1
20