[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-MGASA-2023-0053":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":16,"duplicates":17,"related":18,"reserved_at":9,"published_at":20,"modified_at":21,"state":9,"summary":22,"references_raw":24,"kevs":45,"epss":9,"epss_history":46,"metrics":47,"affected":48},"MGASA-2023-0053","Updated nodejs-qs packages fix security vulnerability\n\nnodejs qs before 6.10.3, as used in Express before 4.17.3 and other\nproducts, allows attackers to cause a Node process hang for an Express\napplication because an __ proto__ key can be used. In many typical Express\nuse cases, an unauthenticated remote attacker can place the attack payload\nin the query string of the URL that is used to visit the application, such\nas a[__proto__]=b&a[__proto__]&a[length]=100000000.  (CVE-2022-24999)\n",null,[],[],[],[14],{"_key":15},"CVE-2022-24999",[],[],[19],{"_key":15},"2023-02-20T21:25:36Z","2026-04-16T04:22:41.495863Z",{"cisa_kev":23,"cisa_ransomware":23,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[25,31,36,41],{"url":26,"sources":27,"tags":29},"https://advisories.mageia.org/MGASA-2023-0053.html",[28],"osv_mageia",[30],"Advisory",{"url":32,"sources":33,"tags":34},"https://bugs.mageia.org/show_bug.cgi?id=31494",[28],[35],"REPORT",{"url":37,"sources":38,"tags":39},"https://www.debian.org/lts/security/2023/dla-3299",[28],[35,40],"WEB",{"url":42,"sources":43,"tags":44},"https://security-tracker.debian.org/tracker/CVE-2022-24999",[28],[35,30],[],[],[],[49],{"ecosystem":50,"name":51,"vendor":52,"product":51,"cpe_part":9,"purl_type":53,"purl_namespace":52,"purl_name":51,"source":9,"versions":54},"Mageia","nodejs-qs","mageia","rpm",[55],{"version":56,"is_range":57,"range_type":58,"version_start":9,"version_start_type":9,"version_end":59,"version_end_type":60,"fixed_in":9},"lt6_5_3_1_mga8",true,"ecosystem","6.5.3-1.mga8","excluding"]