qs
6.17.1 · 28 Oct 2026BSD-3-Clause214.6M / weekRepositorynpmAtom feed
Upgrading qs from 6.15.1 to 6.15.2
1 release in betweenevery note read
- 0
- changes to make
- 1
- advisory fixed
- 0
- new
- 1
- fix
Security
3 advisories still affect 6.15.2
- qs: Denial of Service via Attacker Controlled isBuffermoderate · GHSA-4mjr-xmp4-gh2g
- qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)moderate · GHSA-6pq8-jhm2-2vcw
- qs array-limit bypass via bracket-key comma parsingmoderate · GHSA-x5fp-wj9c-mxmx
Upgrading to 6.16.1 clears them.
Fixes 1 advisory affecting 6.15.1
Release by release
- fixed
Fix grammar
- fixed
6 other lines we could not sort, mostly version bumps
- 6.15.2
stringify: skip null/undefined entries inarrayFormat: 'comma'+encodeValuesOnlyinstead of crashing inencoder - 6.15.2
stringify: use configureddelimiteraftercharsetSentinel - 6.15.2
stringify: applyformatterto encoded key understrictNullHandling - 6.15.2
stringify: skip null/undefined filter-array entries instead of crashing inencoder - 6.15.2
parse: handle nested bracket groups and add regression tests (#530); changes output for some unbalanced bracket keys (see #558) - 6.15.2
Update
@ljharb/eslint-config
1 internal line (docs, tests, tooling) left out.