Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xtsp-7ejg-cqck
Summary
High severity vulnerability that affects qs
Withdrawn, accidental duplicate publish.

The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.
Aliases
0
alias GHSA-crvj-3gj9-gm2p
Fixed_packages
0
url pkg:npm/qs@1.0.0
purl pkg:npm/qs@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nf9-4fhn-fkg9
1
vulnerability VCID-9ykq-nq81-4fcp
2
vulnerability VCID-bcuh-2e2c-53gy
3
vulnerability VCID-pxq3-b7gn-3yah
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@1.0.0
Affected_packages
0
url pkg:npm/qs@0.0.1
purl pkg:npm/qs@0.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.1
1
url pkg:npm/qs@0.0.2
purl pkg:npm/qs@0.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.2
2
url pkg:npm/qs@0.0.3
purl pkg:npm/qs@0.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.3
3
url pkg:npm/qs@0.0.4
purl pkg:npm/qs@0.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.4
4
url pkg:npm/qs@0.0.5
purl pkg:npm/qs@0.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.5
5
url pkg:npm/qs@0.0.6
purl pkg:npm/qs@0.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.6
6
url pkg:npm/qs@0.0.7
purl pkg:npm/qs@0.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.0.7
7
url pkg:npm/qs@0.1.0
purl pkg:npm/qs@0.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.1.0
8
url pkg:npm/qs@0.2.0
purl pkg:npm/qs@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.2.0
9
url pkg:npm/qs@0.3.0
purl pkg:npm/qs@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.3.0
10
url pkg:npm/qs@0.3.1
purl pkg:npm/qs@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.3.1
11
url pkg:npm/qs@0.3.2
purl pkg:npm/qs@0.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.3.2
12
url pkg:npm/qs@0.4.0
purl pkg:npm/qs@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.4.0
13
url pkg:npm/qs@0.4.1
purl pkg:npm/qs@0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.4.1
14
url pkg:npm/qs@0.4.2
purl pkg:npm/qs@0.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.4.2
15
url pkg:npm/qs@0.5.0
purl pkg:npm/qs@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.0
16
url pkg:npm/qs@0.5.1
purl pkg:npm/qs@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.1
17
url pkg:npm/qs@0.5.2
purl pkg:npm/qs@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.2
18
url pkg:npm/qs@0.5.3
purl pkg:npm/qs@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.3
19
url pkg:npm/qs@0.5.4
purl pkg:npm/qs@0.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.4
20
url pkg:npm/qs@0.5.5
purl pkg:npm/qs@0.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.5
21
url pkg:npm/qs@0.5.6
purl pkg:npm/qs@0.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.5.6
22
url pkg:npm/qs@0.6.0
purl pkg:npm/qs@0.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.0
23
url pkg:npm/qs@0.6.1
purl pkg:npm/qs@0.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.1
24
url pkg:npm/qs@0.6.2
purl pkg:npm/qs@0.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.2
25
url pkg:npm/qs@0.6.3
purl pkg:npm/qs@0.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.3
26
url pkg:npm/qs@0.6.4
purl pkg:npm/qs@0.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.4
27
url pkg:npm/qs@0.6.5
purl pkg:npm/qs@0.6.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.5
28
url pkg:npm/qs@0.6.6
purl pkg:npm/qs@0.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ct-wppz-5yav
1
vulnerability VCID-5aq9-t9ja-kbat
2
vulnerability VCID-9ykq-nq81-4fcp
3
vulnerability VCID-bcuh-2e2c-53gy
4
vulnerability VCID-hau3-t73v-a7dv
5
vulnerability VCID-pxq3-b7gn-3yah
6
vulnerability VCID-xtsp-7ejg-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/qs@0.6.6
References
0
reference_url https://github.com/advisories/GHSA-crvj-3gj9-gm2p
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-crvj-3gj9-gm2p
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-7191
reference_id CVE-2014-7191
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-7191
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xtsp-7ejg-cqck