Revert to debug@2.6.9 to eliminate ReDoS in %o formatter

2017-09-26 11:37:42 -04:00 · 2017-09-26 11:37:42 -04:00 · 321b23eebb
commit 321b23eebb
parent 7a71b5d0a1
2 changed files with 4 additions and 1 deletions
--- a/ChangeLog.md
+++ b/ChangeLog.md
@ -1,4 +1,7 @@
 # Change Log
+## [0.1.3] TBD
+### Changed
+- Revert to debug@2.6.9 to eliminate ReDoS in %o formatter
 ## [0.1.2] 2017-07-31
 ### Added
 - ssh.readyTimeout option in config.json (time in ms, default 20000, 20sec)
--- a/package.json
+++ b/package.json
@ -29,7 +29,7 @@
  "dependencies": {
    "basic-auth": "^1.1.0",
    "colors": "^1.1.2",
-    "debug": "^3.0.0",
+    "debug": "^2.6.9",
    "express": "^4.15.4",
    "express-session": "^1.15.5",
    "morgan": "^1.8.2",