| Release | Version |
|---|---|
| bullseye | 6.9.4+ds-1+deb11u1 |
| bookworm | 6.11.0+ds+~6.9.7-3 |
| trixie | 6.13.0+ds+~6.9.16-1 |
| forky | 6.13.0+ds+~6.9.16-1 |
| sid | 6.14.1+ds+~6.14.0-1 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2025-15284 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | Improper Input Validation vulnerability in qs (parse modules) allows H ... |
| Bug | Description |
|---|---|
| CVE-2022-24999 | qs before 6.10.3, as used in Express before 4.17.3 and other products, ... |
| CVE-2014-10064 | The qs module before 1.0.0 does not have an option or default for spec ... |
| CVE-2014-7191 | The qs module before 1.0.0 in Node.js does not call the compact functi ... |
| DSA / DLA | Description |
|---|---|
| DLA-3299-1 | node-qs - security update |