CVE-2014-7191
The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using…
Published: 2014-10-19 · CVSS: Unscored
The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7