CVES CVE-2017-16137
CWE CWE-400
References: - Issue #501

• PR #504
  Affected versions of debug are vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter.

As it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue.
@marshyski