Denial-of-Service in “qs” module (used by express, restify, hapi, +286 others)
blog.liftsecurity.io
Denial-of-Service in “qs” module (used by express, restify, hapi, +286 others)
1–4 of 4 posts
Re: Denial-of-Service in “qs” module (used by express, restify, hapi, +286 others)
#2Re: Denial-of-Service in “qs” module (used by express, restify, hapi, +286 others)
#3How to check for this vulnerability in your app:
> npm install -g nsp
> nsp audit-package // Run in the same dir as your package.json
This will also report any other vulnerabilities, in addition to the "qs" vulnerability.Re: Denial-of-Service in “qs” module (used by express, restify, hapi, +286 others)
#4Great find, looks like this has already been patched in node-restify v2.8.1.