tocsin

Debian/node-qs: high 7.5

### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion. This is

Action: Upgrade node-qs to 6.15.0+ds+~6.15.0-1 or later.

Affected

introducedfixedlast affected
06.15.0+ds+~6.15.0-1-

Fixed versions

6.15.0+ds+~6.15.0-1

Sources

published · modified · JSON