Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-1000048
5
MEDIUMCVSS v2
Published
July 17, 2017
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash.
qs
NPMA querystring parser that supports nesting and arrays, with a depth limit
NPMA querystring parser that supports nesting and arrays, with a depth limit= 4.0.0, = 1.2.0, = 6.1.1, = 2.4.2, = 6.3.0, = 1.0.1, = 1.0.2, = 5.1.0, = 6.0.3, = 1.1.0, = 2.4.1, = 5.2.1, = 6.0.0, = 6.0.1, = 3.0.0, = 3.1.0, = 6.0.2, = 6.3.1, = 2.3.1, = 2.3.2, = 6.1.0, = 1.0.0, = 2.3.3, = 2.4.0, = 5.2.0, = 6.2.0, = 6.2.1, = 6.2.2, = 1.2.1, = 5.0.0, < 6.0.4, >= 6.1.0, < 6.1.2, >= 6.2.0, < 6.2.3, >= 6.3.0, < 6.3.2OSV
ljharb/qs
GitHubA querystring parser and serializer with nesting support
GitHubA querystring parser and serializer with nesting support= 4.0.0, = 1.2.0, = 6.1.1, = 2.4.2, = 6.3.0, = 1.0.1, = 1.0.2, = 5.1.0, = 6.0.3, = 1.1.0, = 2.4.1, = 5.2.1, = 6.0.0, = 6.0.1, = 3.0.0, = 3.1.0, = 6.0.2, = 6.3.1, = 2.3.1, = 2.3.2, = 6.1.0, = 1.0.0, = 2.3.3, = 2.4.0, = 5.2.0, = 6.2.0, = 6.2.1, = 6.2.2, = 1.2.1, = 5.0.0, < 6.0.4, >= 6.1.0, < 6.1.2, >= 6.2.0, < 6.2.3, >= 6.3.0, < 6.3.2NVD