CVE-2026-82417
1 advisory.
npm/qs CVE-2026-82417: medium 5.3
qs: Denial of Service via Attacker Controlled isBuffer
Action: Upgrade qs to 6.16.0 or later.
npm i qs@6.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.5 | 6.16.0 | - |
Fixed versions
| 6.16.0 |
Sources
- osv: GHSA-4mjr-xmp4-gh2g
- https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g
- https://nvd.nist.gov/vuln/detail/CVE-2026-82417
- https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6
- https://github.com/ljharb/qs
CVE-2026-82417 · published · modified · JSON