Packages

qs

6.17.1 · 28 Oct 2026BSD-3-Clause214.6M / weekRepositorynpmAtom feed

Upgrading qs from 6.3.2 to 6.3.3

1 release in betweenevery note read

Other targets from 6.3.2Newest 6.x, Latest6.17.1Clears its 3 advisories6.16.0
0
changes to make
1
advisory fixed
1
new
2
fixes

Security

2 advisories still affect 6.3.3

Upgrading to 6.16.0 clears them.

Fixes 1 advisory affecting 6.3.2

Release by release

  1. 6.3.3

    11 Jan 20221 new · 2 fixes
    • new

      Add FUNDING.yml

    • fixed

      Fix for an impossible situation: when the formatter is called with a non-string value

    • fixed

      Fix README.md

12 other lines we could not sort, mostly version bumps

  • parse: ignore __proto__ keys

    6.3.3

  • utils.merge: avoid a crash with a null target and an array source

    6.3.3

  • utils.merge: avoid a crash with a null target and a truthy non-array source

    6.3.3

  • stringify: fix a crash with strictNullHandling and a custom filter/serializeDate

    6.3.3

  • utils: merge: fix crash when source is a truthy primitive & no options are provided

    6.3.3

  • When parseArrays is false, properly handle keys ending in ``

    6.3.3

  • stringify: avoid relying on a global undefined

    6.3.3

  • Use cached Array.isArray

    6.3.3

  • stringify: Avoid arr = arr.concat(...), push to the existing instance

    6.3.3

  • Clean up license text so it’s properly detected as BSD-3-Clause

    6.3.3

3 internal lines (docs, tests, tooling) left out.