npm/debug CVE-2017-20165: high 7.5, EPSS 2.10%
debug Inefficient Regular Expression Complexity vulnerability
Action: Upgrade debug to 2.6.9 or later.
npm i debug@3.1.0npm i debug@2.6.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.0 | - |
| 0 | 2.6.9 | - |
Fixed versions
| 3.1.0 | 2.6.9 |
Sources
- osv: GHSA-9vvw-cc9w-f27h
- https://nvd.nist.gov/vuln/detail/CVE-2017-20165
- https://github.com/debug-js/debug/pull/504
- https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685
- https://github.com/debug-js/debug/commit/f53962e944a87e6ca9bb622a2a12dffc22a9bb5a
- https://github.com/debug-js/debug
- https://github.com/debug-js/debug/releases/tag/2.6.9
- https://github.com/debug-js/debug/releases/tag/3.1.0
- https://vuldb.com/?ctiid.217665
- https://vuldb.com/?id.217665
CVE-2017-20165 · published · modified · JSON