Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

debug-js/debug

              master @ f405ade
            

Fixes

CVEs

MEDIUM

Peak severity

0.0%

Coverage

Highlights

ReDoS: 2 prior fixes. Scrutinize any change in this area.

src/node.js: most-fixed (2 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

ReDoS: The '%o' formatter in 'src/node.js' historically parsed input using vulnerable regular expressions, allowing attackers to trigger event-loop starvation and Denial of Service by submitting large payloads of around 50,000 characters. This risk was addressed across multiple iterations by replacing regex-based formatting with deterministic string operations.