Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-16137
Description
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.
debug
NPMLightweight debugging utility for Node.js and the browser
NPMLightweight debugging utility for Node.js and the browser>= 2.0.0, < 2.6.9, >= 3.0.0, < 3.1.0NVD
debug-js/debug
GitHubA tiny JavaScript debugging utility modelled after Node.js core's debugging technique. Works in Node.js and web browsers
GitHubA tiny JavaScript debugging utility modelled after Node.js core's debugging technique. Works in Node.js and web browsers>= 2.0.0, < 2.6.9, >= 3.0.0, < 3.1.0NVD
