description: The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.
problem types: Denial of Service (CWE-400)
affected:
{
product: debug node module
vendor: HackerOne
versions:
status: affected, version: <= 2.6.8 || >= 3.0.0 <= 3.0.1
}