Tag

qs

Safeguard articles tagged "qs" — guides, analysis, and best practices for software supply chain and application security.

1 article

Express qs library prototype pollution DoS (CVE-2022-24999)

CVE-2022-24999 lets attackers pollute Object.prototype through qs, the query-string parser Express relies on, crashing Node.js applications.