CVE-2026-110816 | ljharb qs up to 6.16.0 String Coercion lib/stringify.js qs.stringify input validation (a952e75)

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in ljharb qs up to 6.16.0. This vulnerability affects the function qs.stringify of the file lib/stringify.js of the component String Coercion. The manipulation leads to improper input validation.

This vulnerability is documented as CVE-2026-110816. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More