Skip to content

qs's arrayLimit bypass in comma parsing allows denial of service

Low severity GitHub Reviewed Published Feb 12, 2026 in ljharb/qs • Updated Feb 12, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts