CVE-2026-110910 | ljharb qs up to 6.16.x Stringify lib/stringify.js qs.stringify injection

October 27, 2026 Yanac

A vulnerability labeled as problematic has been found in ljharb qs up to 6.16.x. Affected is the function qs.stringify of the file lib/stringify.js of the component Stringify. Such manipulation leads to injection.

This vulnerability is uniquely identified as CVE-2026-110910. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More