Skip to content
OpenAdvisories
High RHSA-2017:2672 1 CVE

Red Hat Security Advisory: rh-nodejs6-nodejs-qs security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-nodejs6-nodejs-qs 0:6.2.3-1.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-nodejs6-nodejs-qs 0:6.2.3-1.el7

Vulnerabilities 1

  • High 7.5
    CVE-2017-1000048

    Prototype Pollution Protection Bypass in qs

    the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash.

    nodejs-nodemon qs Azure Linux npm

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1427872
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2672.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000048
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000048
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000048
  • article
    https://snyk.io/vuln/npm:qs:20170213