deps: qs@2.4.2

History.md

@@ -9,6 +9,8 @@ unreleased
     - deps: on-finished@~2.2.1
   * deps: proxy-addr@~1.0.8
     - deps: ipaddr.js@1.0.1
+  * deps: qs@2.4.2
+   - Fix allowing parameters like `constructor`
   * deps: send@0.12.3
     - deps: debug@~2.2.0
     - deps: depd@~1.0.1

package.json

@@ -44,7 +44,7 @@
     "parseurl": "~1.3.0",
     "path-to-regexp": "0.1.3",
     "proxy-addr": "~1.0.8",
-    "qs": "2.4.1",
+    "qs": "2.4.2",
     "range-parser": "~1.0.2",
     "send": "0.12.3",
     "serve-static": "~1.9.3",