---
title: "debug 4.4.3"
description: "Latest published version of debug is 4.4.3, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/debug
lang: en
---

[Packages](https://inlinr.com/packages)

# debug

4.4.3 · 13 Sep 2025 MIT 930.4M / week [Repository](https://github.com/debug-js/debug) [Homepage](https://github.com/debug-js/debug#readme) [npm](https://www.npmjs.com/package/debug) [Atom feed](https://inlinr.com/packages/feed/debug)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/debug/upgrade)

LineNewestSecurity

- 4.x 4.4.3 Safe from 4.4.3 Latest line
- 3.x and older 3.2.7 20 open advisories, worst high  · last release Nov 2020, no longer updated [To 4.4.3](https://inlinr.com/packages/debug/upgrade/3.2.7-4.4.3)

## Latest releases

[All 78 releases](https://inlinr.com/packages/debug/releases)

1. 4.x · latest line
2. ### [4.4.3](https://inlinr.com/packages/debug/releases/4.4.3 "Open this release") [](https://github.com/debug-js/debug/releases/tag/4.4.3 "Read this release where it was published")  
13 Sep 2025  
Functionally identical release to `4.4.1`.
3. ### [4.4.2](https://inlinr.com/packages/debug/releases/4.4.2 "Open this release")  
8 Sep 2025
4. ### [4.4.1](https://inlinr.com/packages/debug/releases/4.4.1 "Open this release") [](https://github.com/debug-js/debug/releases/tag/4.4.1 "Read this release where it was published")  
13 May 2025

  - **Issue-996:** Replace whitespaces in namespaces string with commas globally
  - Fixes [#987](https://github.com/debug-js/debug/issues/987) fallback to localStorage.DEBUG if debug is not defined

Dependency tracking · free for 3 projects

## Know when your own dependencies move

This page watches debug. inlinr reads your package.json and keeps the same watch on every dependency you declare, then tells you only what needs you.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

[All 4](https://inlinr.com/packages/debug/security)

- [debug@4.4.2 contains malware after npm account takeover](https://inlinr.com/advisories/GHSA-4x49-vf9v-38px) High · fixed in 4.4.3
- [debug Inefficient Regular Expression Complexity vulnerability](https://inlinr.com/advisories/GHSA-9vvw-cc9w-f27h) High · fixed in 3.1.0, 2.6.9
- [Regular Expression Denial of Service in debug](https://inlinr.com/advisories/GHSA-gxpj-cx7g-858c) Low · fixed in 4.3.1, 3.2.7, 2.6.9

## Health

[Details](https://inlinr.com/packages/debug/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.