### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion. [CVSS 3.7 LOW]
Denial Of Service
Node.js
Qs
Qs Project
NVD
GitHub
CVSS 3.1
3.7
EPSS
0.0%