Express 4.22.2 has qs vulnerable dependency

Environment information

Version: 4.22.2

Platform: x86, x64

Node.js version: "node": ">= 0.10.0"

Any other relevant information:

What steps will reproduce the bug?

express 4.22.2 uses qs 6.15.2 version as dependency, where qs 6.15.2 is reported as vulnerability as CVE-2026-82417, CVE-2026-82562 https://security.snyk.io/package/npm/qs