VDB
EN

package

npm / qs

pkg:npm/qs

MEDIUM 5.3 npm
GHSA-q8mj-m7cp-5q26 · CVE-2026-8723

qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set

수정: 2026. 5. 26.