What’s Vulnerable › Products

HackerOne qs node module vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your HackerOne qs node module version is affected

Latest HackerOne qs node module vulnerabilities

• CVE-2026-2391 — qs's arrayLimit bypass in comma parsing allows denial of service (CVSS 7.5)
• CVE-2025-15284 — arrayLimit bypass in bracket notation allows DoS via memory exhaustion (CVSS 3.7)
• CVE-2022-24999 — qs vulnerable to Prototype Pollution (CVSS 7.5)
• CVE-2014-10064 — (CVSS 7.5)
• CVE-2017-1000048 — Prototype Pollution Protection Bypass in qs (CVSS 7.5)