cheffe01 e03c51a75e Fix qs vulnerability (GHSA-q8mj-m7cp-5q26)
Task: Fix medium-severity qs DoS vulnerability in the dependency chain.

The vulnerability affects qs >=6.11.1 <=6.15.1 — qs.stringify crashes
with a TypeError when null/undefined entries appear in comma-format arrays
with encodeValuesOnly set. The fix requires upgrading to qs >=6.15.2.

The affected path was: artifacts/api-server > express > qs@6.15.1

Fix: Added a pnpm workspace override in pnpm-workspace.yaml to force
qs to >=6.15.2 across all packages:

  qs: ">=6.15.2"

Ran `pnpm install` to apply the override (+1/-1 package). Confirmed with
`pnpm audit` — no known vulnerabilities found after the fix.

No code changes were required; only the lockfile and workspace config
were updated.

Replit-Task-Id: 59fbfd17-c5e4-4330-b97c-49a9e383db2e
2026-05-25 13:10:23 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
2026-05-14 20:25:38 +00:00
S
Description
Tool Evaluator
2.5 MiB
Languages
TypeScript 95%
CSS 2.2%
JavaScript 2%
HTML 0.6%
Dockerfile 0.2%