ljharb qs

3 known vulnerabilities in ljharb qs, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-82562 CVSS 6.3 medium ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push…
CVE-2026-82417 CVSS 6.3 medium ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable…
CVE-2026-8723 CVSS 6.3 medium ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing…