Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
ljharb/qs allows unauthorized code execution
published 4 days ago
Summary
The qs component from ljharb contains a flaw that could let an attacker run their own code on your system. This could lead to data loss or other unwanted actions. Update to version 6.13.0-tuxcare.5, which includes the fix, as soon as possible.
What to do
- Update ljharb qs to version 6.13.0-tuxcare.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | ljharb | qs |
>= 6.13.0-tuxcare.0, < 6.13.0-tuxcare.5 Fix: upgrade to 6.13.0-tuxcare.5
|
Original advisory text
TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.13.0-tuxcare.5.
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLSA-2026-1793449041 · OSV
Track software like this
Free during beta