qs
6.17.1 · 28 Oct 2026BSD-3-Clause214.6M / weekRepositorynpmAtom feed
Upgrading qs from 6.11.4 to 6.12.0
1 release in betweenevery note read
Security
5 advisories still affect 6.12.0
- qs: Denial of Service via Attacker Controlled isBuffermoderate · GHSA-4mjr-xmp4-gh2g
- qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)moderate · GHSA-6pq8-jhm2-2vcw
- qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is setmoderate · GHSA-q8mj-m7cp-5q26
Upgrading to 6.16.1 clears them.
Release by release
- new
Add
sideEffectsflag - fixed
Fix line wrapping
- new
14 other lines we could not sort, mostly version bumps
- 6.12.0
parse/stringify: adddecodeDotInKeys/encodeDotKeysoptions - 6.12.0
parse: addduplicatesoption - 6.12.0
parse/stringify: addallowEmptyArraysoption to allow in object values - 6.12.0
parse/stringify: move allowDots config logic to its own variable - 6.12.0
stringify: move option-handling code intonormalizeStringifyOptions - 6.12.0
Update readme, add logos
- 6.12.0
stringify: clarify defaultarrayFormatbehavior - 6.12.0
Remove dead badges
- 6.12.0
Update
side-channel - 6.12.0
Make the dist build 50% smaller
4 internal lines (docs, tests, tooling) left out.