CVE-2017-1000048
1 advisory.
npm/qs CVE-2017-1000048: high 7.5
Prototype Pollution Protection Bypass in qs
Action: Upgrade qs to 6.0.4 or later.
npm i qs@6.0.4npm i qs@6.1.2npm i qs@6.2.3npm i qs@6.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.4 | - |
| 6.1.0 | 6.1.2 | - |
| 6.2.0 | 6.2.3 | - |
| 6.3.0 | 6.3.2 | - |
Fixed versions
| 6.0.4 | 6.1.2 | 6.2.3 | 6.3.2 |
Sources
- osv: GHSA-gqgv-6jq5-jjj9
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000048
- https://github.com/ljharb/qs/issues/200
- https://github.com/ljharb/qs/commit/beade029171b8cef9cee0d03ebe577e2dd84976d
- https://access.redhat.com/errata/RHSA-2017:2672
- https://github.com/ljharb/qs
- https://snyk.io/vuln/npm:qs:20170213
- https://www.npmjs.com/advisories/1469
CVE-2017-1000048 · published · modified · JSON