CVE-2026-82417

Summary "qs.stringify" throws a "TypeError" when it serializes an object whose own "constructor" property has a truthy, non-callable "isBuffer" member. "utils.isBuffer" duck-types buffers by calling "obj.constructor.isBufferobj" after checking only that the property is truthy, so a value such as ...