481 matches found
SUSE CVE-2026-110910
Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or therefore becomes query string syntax instead of data, so a caller-supplied key name can add...
CVE-2022-24999
CVE-2022-24999 This repository contain exploits samples of the vulnerability we found in the JS library "qs" in december 2021. This vulnerability was fixed in express v4.17.3 & qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, and v6.2.4. qs Array & String Bombs Vulnerable versio...
GHSA-6PQ8-JHM2-2VCW qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
Summary qs.stringifyobj, arrayFormat: 'comma' throws an uncaught TypeError: Cannot convert object to primitive value when an array in obj contains an element that carries an own, non-callable toString property for example a: toString: 'x' . A remote, unauthenticated attacker who can influence an...
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
Summary qs.stringifyobj, arrayFormat: 'comma' throws an uncaught TypeError: Cannot convert object to primitive value when an array in obj contains an element that carries an own, non-callable toString property for example a: toString: 'x' . A remote, unauthenticated attacker who can influence an...
npm: qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
npm: qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString DoS vulnerability discovered by ? in WordPress npm qs versions = 6.7.0, = 6.16.0...
EUVD-2026-101710
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString DoS...
CLSA-2026-1793098775 TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.10.4-tuxcare.2...
CLSA-2026-1793098692 TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.14.0-tuxcare.4...
CLSA-2026-1793098678 TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.11.2-tuxcare.2...
CVE-2026-110910
Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or therefore becomes query string syntax instead of data, so a caller-supplied key name can add...
CVE-2026-110910 qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection
Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or therefore becomes query string syntax instead of data, so a caller-supplied key name can add...
CVE-2026-110910
The qs library (versions >=6.12.0
CVE-2026-110910
Summary "qs.stringify" with "allowEmptyArrays: true" writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains "&" or the configured "delimiter", "=", or "" therefore becomes query string syntax instead of data, so a caller-supplied key nam...
CVE-2026-110910 qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection
Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or therefore becomes query string syntax instead of data, so a caller-supplied key name can add...
EUVD-2026-110630
Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or therefore becomes query string syntax instead of data, so a caller-supplied key name can add...
PT-2026-125882
Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or ∴ becomes query string syntax instead of data, so a caller-supplied key name can add parameters ...
CLSA-2026-1793015982 TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.13.0-tuxcare.4...
CLSA-2026-1793015893 TuxCare security update for qs (5 CVEs)
TuxCare rebuilt qs to address 5 CVEs. Fixed in 0.4.2-tuxcare.1...
Security Bulletin: vulnerability in [email protected]
Summary Upgrade to new InformixHQ Vulnerability Details CVEID:CVE-2026-82417 DESCRIPTION: Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling...