qs: Denial of Service via Attacker Controlled isBuffer

Summary qs.stringify calls utils.isBuffer on every value it serializes, and utils.isBuffer invokes obj.constructor.isBufferobj without checking that it is callable. A value whose own constructor.isBuffer is a non-function makes qs call a non-callable and throw TypeError. Such a value is produced ...