CVE-2026-82562

Summary When "qs.parse" is called with "comma: true" and "throwOnLimitExceeded: true", a comma-separated value under a bracket-push key "a=1,2,3,4" is split into an array without being compared against "arrayLimit", while the same value under a flat key "a=1,2,3,4", an indexed key "a0=", a nested...

PT-2017-10758

Name of the Vulnerable Software and Affected Versions qs versions prior to 6.0.4 qs versions prior to 6.1.2 qs versions prior to 6.2.3 qs versions prior to 6.3.2 Description The issue allows a malicious user to send a request that can cause the web framework to crash, resulting in a Denial of...