tocsin

Debian/node-qs: unknown

### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compare

Action: Upgrade node-qs to 6.16.0+ds+~6.15.1-1 or later.

Affected

introducedfixedlast affected
06.16.0+ds+~6.15.1-1-

Fixed versions

6.16.0+ds+~6.15.1-1

Sources

published · modified · JSON