Products: 2
Vulnerabilities: 6
Known Exploited: 0
0
Critical Level Threats
2
High Level Threats
2
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-82562
qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)
Last Modified: Aug 31, 2026
Published: Aug 29, 2026
CVE-2026-82417
qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property
Last Modified: Aug 31, 2026
Published: Aug 29, 2026
CVE-2026-13311
shell-quote parse() is quadratic in token count, enabling denial of service
Last Modified: Jun 25, 2026
Published: Jun 25, 2026
CVE-2026-9277
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
Last Modified: Sep 04, 2026
Published: May 22, 2026
CVE-2026-8723
qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly
Last Modified: May 18, 2026
Published: May 16, 2026
Items Per Page
