debug

4.4.3 · 13 Sep 2025MIT930.4M / weekRepository Homepage npm Atom feed

Your version

3.2.1

11 Sep 2018Where it was published

3.2.7 is the newest release of 3.x.

npm marks 3.2.1 as deprecated: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (visionmedia/debug#797)

In short

1 deprecated1 fixed

deprecated
3.2.1 is DEPRECATED.

Security

1 advisory affects 3.2.1; 3.2.7 fixes them

Low
Regular Expression Denial of Service in debugGHSA-gxpj-cx7g-858c · 9 Aug 2018
Fixed in 3.2.7

Release note

3.2.1 is DEPRECATED. See #603 for details.

This release, along with 3.2.0, were subsequently released together as 4.0.0 (a major bump). You can review the complete changes in that release's details.

A quick hotfix to address Browser builds - debug is now compiled down to IE8-compatible code via Babel upon release.

CDNs that honor the "browser": key in package.json should now reflect these changes (previously, they would serve the non-bundled ES6 version).

Patches

Use babel-ified distributed source for browsers: b3f8f8e