[ Vendor · 2 CVEs ]

ljharb

CVEs affecting ljharb published in the last 30 days, plus any ljharb CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-110816 14 Oct 2026 CVSS 5.3 ljharb qs### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be…
CVE-2026-107353 7 Oct 2026 CVSS 6.5 ljharb traversetraverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution through…