Regular Expression DoS via dependent module `debug`

aacerox / node-rest-client

REST API client from node.js

MIT License

377 stars 132 forks source link

Open AxeOfMen opened 6 years ago

AxeOfMen commented 6 years ago

The version of the debug dependency used is vulnerable to a denial of service attack. See https://nodesecurity.io/advisories/534

dsibilly commented 6 years ago

This issue remains unresolved. debug@2.6.9 is the most current update of v2 of the debug module that is patched against this attack.