CVE-2025-15284 | qs up to 6.14.0 code (lib/parse.js parse a[] denial of service (GHSA-6rw7-vpxm-498p)

December 30, 2025 Yanac

A vulnerability classified as problematic has been found in qs up to 6.14.0. Affected by this vulnerability is the function parse in the library code (lib/parse.js. This manipulation of the argument a[] causes denial of service.

This vulnerability is handled as CVE-2025-15284. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.

If you want to get best quality of vulnerability data, you may have to visit VulDB.VulDB Recent EntriesRead More