GHSA-f9cm-p3w6-xvr3
GitHub Security Advisory
Denial-of-Service Extended Event Loop Blocking in qs
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Versions prior to 1.0.0 of `qs` are affected by a denial of service vulnerability that results from excessive recursion in parsing a deeply nested JSON string.
## Recommendation
Update to version 1.0.0 or later
Affected Packages
npm
qs
Affected versions:
0
(fixed in 1.0.0)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 3, 2025 6:26 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.