[Git][security-tracker-team/security-tracker][master] node-qs fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5f6d1313 by Moritz Muehlenhoff at 2026-08-31T18:45:40+02:00
node-qs fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -404,7 +404,7 @@ CVE-2026-58581
 	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/702216619e2a1afd5039520114f4d245d7011f09 (v11.1.0-rc2)
 	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/e0397dbe1a295e037f16f154aaaa3cff3341fc3d (v11.0.4)
 CVE-2026-82562 (### Summary    When `qs.parse` is called with `comma: true` and `throw ...)
-	- node-qs <unfixed>
+	- node-qs 6.16.0+ds+~6.15.1-1
 	[trixie] - node-qs <no-dsa> (Minor issue)
 	NOTE: https://github.com/ljharb/qs/security/advisories/GHSA-x5fp-wj9c-mxmx
 	NOTE: Fixed by: https://github.com/ljharb/qs/commit/8859c37470e11b42b547b275e4e9bd0bc8cc5464 (v6.16.0)
@@ -425,7 +425,7 @@ CVE-2026-82422 (A security flaw has been discovered in itsourcecode Sales and In
 CVE-2026-82421 (A vulnerability was identified in itsourcecode Sales and Inventory Sys ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-82417 (### Summary    `qs.stringify` throws a `TypeError` when it serializes  ...)
-	- node-qs <unfixed>
+	- node-qs 6.16.0+ds+~6.15.1-1
 	[trixie] - node-qs <no-dsa> (Minor issue)
 	NOTE: https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g
 	NOTE: Fixed by: https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6 (v6.16.0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f6d131366c1fdd3fe5785617547cd08cf911219

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f6d131366c1fdd3fe5785617547cd08cf911219
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/88998536/attachment-0001.htm>