Products: 3
Vulnerabilities: 10
Known Exploited: 0
0
Critical Level Threats
3
High Level Threats
4
Medium Level Threats
3
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-110910
qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection
Last Modified: Nov 04, 2026
Published: Oct 27, 2026
CVE-2026-110816
qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string
Last Modified: Oct 17, 2026
Published: Oct 14, 2026
CVE-2026-107353
traverse: set() can write to built-in prototypes via an untrusted path
Last Modified: Oct 09, 2026
Published: Oct 07, 2026
CVE-2026-102422
shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token
Last Modified: Sep 30, 2026
Published: Sep 29, 2026
CVE-2026-82562
qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)
Last Modified: Aug 31, 2026
Published: Aug 29, 2026
Items Per Page
