{
  "@id": "urn:uuid:63e6ad9b-6e38-4bb6-b12c-8747abba46d2",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 10,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T15:13:50.465041+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:31:18.734944+00:00",
      "status_notes": "Vulnerability CVE-2014-10064 affects version 6.13.0 of qs.",
      "vulnerability": {
        "name": "CVE-2014-10064"
      },
      "action_statement": "Vulnerability CVE-2014-10064 affects version 6.13.0 of qs."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-11-03T15:13:50.465041+00:00",
      "status_notes": "Vulnerability CVE-2014-7191 does not affect version 6.13.0 of qs. not_affected \u2014 Target qs@6.13.0-tuxcare.5 is NOT affected by CVE-2014-7191. All three defenses against sparse array memory exhaustion DoS are present and enabled by default: (1) array index limit \u226420, (2) parameter limit \u22641000, and (3) sparse array compaction. These fixes were introduced by upstream maintainer Nathan LaFreniere in July 2014 (commits 4667c41c and bb10408f) and were already present in upstream ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2014-7191"
      },
      "impact_statement": "not_affected \u2014 Target qs@6.13.0-tuxcare.5 is NOT affected by CVE-2014-7191. All three defenses against sparse array memory exhaustion DoS are present and enabled by default: (1) array index limit \u226420, (2) parameter limit \u22641000, and (3) sparse array compaction. These fixes were introduced by upstream maintainer Nathan LaFreniere in July 2014 (commits 4667c41c and bb10408f) and were already present in upstream ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:31:18.734944+00:00",
      "status_notes": "Vulnerability CVE-2017-1000048 affects version 6.13.0 of qs.",
      "vulnerability": {
        "name": "CVE-2017-1000048"
      },
      "action_statement": "Vulnerability CVE-2017-1000048 affects version 6.13.0 of qs."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:31:18.734944+00:00",
      "status_notes": "Vulnerability CVE-2022-24999 affects version 6.13.0 of qs.",
      "vulnerability": {
        "name": "CVE-2022-24999"
      },
      "action_statement": "Vulnerability CVE-2022-24999 affects version 6.13.0 of qs."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-09-27T15:05:00.660662+00:00",
      "status_notes": "Vulnerability CVE-2025-15284 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2025-15284"
      },
      "action_statement": "Vulnerability CVE-2025-15284 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-31T13:15:51.066885+00:00",
      "status_notes": "Vulnerability CVE-2026-110816 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-110816"
      },
      "action_statement": "Vulnerability CVE-2026-110816 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-27T07:05:00.167026+00:00",
      "status_notes": "Vulnerability CVE-2026-110910 affects version 6.13.0 of qs.",
      "vulnerability": {
        "name": "CVE-2026-110910"
      },
      "action_statement": "Vulnerability CVE-2026-110910 affects version 6.13.0 of qs."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-07T12:02:00.089721+00:00",
      "status_notes": "Vulnerability CVE-2026-2391 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-2391"
      },
      "action_statement": "Vulnerability CVE-2026-2391 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-09-27T15:05:00.660662+00:00",
      "status_notes": "Vulnerability CVE-2026-82417 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-82417"
      },
      "action_statement": "Vulnerability CVE-2026-82417 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-26T12:55:53.554317+00:00",
      "status_notes": "Vulnerability CVE-2026-82562 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-82562"
      },
      "action_statement": "Vulnerability CVE-2026-82562 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-09-27T15:29:00.097627+00:00",
      "status_notes": "Vulnerability CVE-2026-8723 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-8723"
      },
      "action_statement": "Vulnerability CVE-2026-8723 affects version 6.13.0 of qs, and is fixed in 6.13.0-tuxcare.2."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/qs@6.13.0",
          "identifiers": {
            "purl": "pkg:npm/qs@6.13.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:31:18.734944+00:00",
      "status_notes": "Vulnerability GHSA-crvj-3gj9-gm2p is a false positive for qs 6.13.0.",
      "vulnerability": {
        "name": "GHSA-crvj-3gj9-gm2p"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}