CVE-2014-7191

CVE-2014-7191 affects the qs module in Node.js, where the qs parser fails to compact third-party array data, enabling memory exhaustion under crafted deeply-nested inputs (DoS). Public IBM advisories map the vulnerability to IBM Security Verify Governance (and related tools) and to Cordova-based ...