Task: Fix medium-severity qs DoS vulnerability in the dependency chain.
The vulnerability affects qs >=6.11.1 <=6.15.1 — qs.stringify crashes
with a TypeError when null/undefined entries appear in comma-format arrays
with encodeValuesOnly set. The fix requires upgrading to qs >=6.15.2.
The affected path was: artifacts/api-server > express > qs@6.15.1
Fix: Added a pnpm workspace override in pnpm-workspace.yaml to force
qs to >=6.15.2 across all packages:
qs: ">=6.15.2"
Ran `pnpm install` to apply the override (+1/-1 package). Confirmed with
`pnpm audit` — no known vulnerabilities found after the fix.
No code changes were required; only the lockfile and workspace config
were updated.
Replit-Task-Id: 59fbfd17-c5e4-4330-b97c-49a9e383db2e
opencode
Replit Agent
cheffe01