javascriptexpressjs/express #6968Not a task: already works

update to `qs@^6.14.1`

envgap__expressjs__express-6968

Original GitHub issue ↗Dated source checkout ↗Opened 2026-01-02

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: c2fb76e99f7379b706a5510b4b2dd08a1b710b7b
Manifest: package.json
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

expressjs/express #6968 · read the original issue

 
- Failure issue:
> - https://github.com/advisories/GHSA-6rw7-vpxm-498p 
- A few days ago, the following security flaw was discovered in lib qs. However, no issue or PR was found regarding this flaw or a possible solution.
- Projects that use Express are vulnerable and without solutions for the flaw.
- Please let us know when you can. Thank you!

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]