CVE-2022-24999

CVE-2022-24999 이 저장소에는 2021년 12월에 JS 라이브러리 "qs"에서 발견한 취약점의 익스플로잇 샘플이 포함되어 있습니다. 이 취약점은 express v4.17.3 & qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, and v6.2.4에서 수정되었습니다. qs 배열 및 문자열 폭탄 취약한 버전의 "qs"는 출력 JS 객체에 "proto " 속성을 생성할 수 있습니다. " proto" 속성에 배열을 설정함으로써 "array-like" 객체...

ROOT-APP-NPM-CVE-2026-2391 CVE-2026-2391 in qs - Patched by Root

Root has patched CVE-2026-2391 in the qs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-15284 CVE-2025-15284 in qs - Patched by Root

Root has patched CVE-2025-15284 in the qs package for Root:npm. Multiple fixed versions available...

Rocky Linux 10.2 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18480)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618480 advisory. qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-tar: Arbitrary file overwrite and symlink...

Rocky Linux 9 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18868)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618868 advisory. qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-tar: Arbitrary file overwrite and symlink...

Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.

Summary IBM Rational Build Forge 8.1.0.0 addresses multiple vulnerabilites Vulnerability Details CVEID:CVE-2026-2391 DESCRIPTION: Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing attackers to cause denial-of-service via...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in qs

Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-82417 DESCRIPTION: Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callab...

CLSA-2026-1790541933 TuxCare security update for qs (2 CVEs)

TuxCare rebuilt qs to address 2 CVEs. Fixed in 6.15.3-tuxcare.1...

CLSA-2026-1790522895 TuxCare security update for qs (1 CVE)

TuxCare rebuilt qs to address 1 CVE. Fixed in 6.13.0-tuxcare.2...

CLSA-2026-1790521454 TuxCare security update for qs (2 CVEs)

TuxCare rebuilt qs to address 2 CVEs. Fixed in 6.13.0-tuxcare.1...

CLSA-2026-1790183896 TuxCare security update for qs (1 CVE)

TuxCare rebuilt qs to address 1 CVE. Fixed in 6.4.3-tuxcare.1...

CLSA-2026-1790183894 TuxCare security update for qs (1 CVE)

TuxCare rebuilt qs to address 1 CVE. Fixed in 6.2.6-tuxcare.1...

CLSA-2026-1790178011 TuxCare security update for qs (1 CVE)

TuxCare rebuilt qs to address 1 CVE. Fixed in 5.2.1-tuxcare.3...

Security Bulletin: Vulnerability found in qs-6.15.1.tgz is addressed in APIM 11.1

Summary Vulnerability found in qs-6.15.1.tgz is addressed in IBM webMethods API Gateway Vulnerability Details CVEID:CVE-2026-8723 DESCRIPTION: Summary qs.stringify throws TypeError when called with arrayFormat: 'comma' and encodeValuesOnly: true on an array containing null or undefined. The throw...

Astra Linux – Vulnerability in node-qs

The qs format used before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process to hang for an Express application. This is because the proto key can be exploited. In many typical Express use cases, an unauthenticated remote attacker can insert the...

EUVD-2026-77073

A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...

CVE-2026-90583: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...

Security Bulletin: MongoDB Enterprised Advanced affected by: NULL Pointer Dereference (CVE-2026-8723)

Summary There are vulnerabilities in qs-6.14.2.tgz, qs-6.15.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-8723. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-8723 DESCRIPTION: Summary qs.stringify throws TypeError when called with...

SUSE CVE-2026-2391

Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing attackers to cause denial-of-service via memory exhaustion. This is a bypass of the array limit enforcement, similar to the bracket notation bypass addressed in...

SUSE CVE-2026-82417

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...