The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade node-qs | Jul 30, 2024 | Oct 19, 2014 |
| Ubuntu | — | Upgrade node-qs (Ubuntu Pro) | Nov 19, 2024 | Oct 19, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub