QS
Product
qs
5
CVEs
0
On KEV
5.3
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 3Low 2
Watch
Add qs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110816 | 5.3 | Oct 14 | qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string Affected: 6.7.0 before 6.16.1 |
| CVE-2026-82417 | 5.3 | Aug 29 | qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property Affected: 2.2.5 before 6.16.0 |
| CVE-2026-8723 | 5.3 | May 16 | qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly Affected: 6.11.1 before 6.15.2 |
Showing 3