Skip to content
OpenAdvisories

Product · HackerOne

qs node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2014-10064

    Denial-of-Service Extended Event Loop Blocking in qs

    The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary de…

    HackerOne qs node module node-qs qs Debian Ubuntu npm