An open index of dependabot pull requests across open source projects.

qs

Ecosystem:
npm
Package URL:
pkg:npm/qs
Total PRs:
19,404 Dependabot PRs
Latest PR:
about 4 hours ago
Unique Repositories:
17,046 repositories
Unique Repos (30 days):
2,689 repositories
Security Advisories
Denial-of-Service Memory Exhaustion in qs
GHSA-jjv7-qpx3-h62q CVE-2014-7191 HIGH published over 8 years ago • updated about 2 hours ago
Versions prior to 1.0 of `qs` are affected by a denial of service condition. This condition is triggered by parsing a crafted string that deseriali...
qs's arrayLimit bypass in comma parsing allows denial of service
GHSA-w7fw-mjwx-w883 CVE-2026-2391 LOW published 21 days ago • updated about 18 hours ago
### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to c...
Prototype Pollution Protection Bypass in qs
GHSA-gqgv-6jq5-jjj9 CVE-2017-1000048 HIGH published almost 6 years ago • updated about 2 hours ago
Affected version of `qs` are vulnerable to Prototype Pollution because it is possible to bypass the protection. The `qs.parse` function fails to pr...
qs vulnerable to Prototype Pollution
GHSA-hrpp-h998-j3pp CVE-2022-24999 HIGH published over 3 years ago • updated about 18 hours ago
qs before 6.10.3 allows attackers to cause a Node process hang because an `__ proto__` key can be used. In many typical web framework use cases, an...
Denial-of-Service Extended Event Loop Blocking in qs
GHSA-f9cm-p3w6-xvr3 CVE-2014-10064 HIGH published over 7 years ago • updated about 2 hours ago
Versions prior to 1.0.0 of `qs` are affected by a denial of service vulnerability that results from excessive recursion in parsing a deeply nested ...
Recent PRs
Package Details
Name: qs
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/qs
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 4
MODERATE 1
LOW 1
View All npm Advisories
Package Information
Description:

A querystring parser that supports nesting and arrays, with a depth limit

Repository: https://github.com/ljharb/qs
Homepage: https://github.com/ljharb/qs
Latest Release: 6.14.0
about 1 year ago
Dependent Repos: 2,110,964
Dependent Packages: 15,944
Downloads: 399,573,108
Ranking: Top 0.0137% by dependent repos Top 0.0019% by downloads Top 0.0064% by dependent pkgs
PR Status
Open 5,435 (28.0%)
Merged 322 (1.7%)
Closed 13,364 (68.9%)
PR Types
Removal 64 (0.3%)
Minor 11,910 (61.4%)
Major 44 (0.2%)
Patch 7,073 (36.5%)