# Debug Mode Enabled in Production - ID: javascript-debug-mode-production - Severity: MEDIUM - CWE: CWE-489 (CWE-489) - Languages: JavaScript, TypeScript - Frameworks: express, fastify, nodejs ## Description Detects hardcoded debug flags that expose sensitive information or enable debugging features in production. ## Detection Message Debug flag at line {line} is hardcoded to true ## Remediation Use environment variables for debug/development mode configuration. ## Documentation [object Object] ## Related Rules - **Django Debug Mode in Production** [CRITICAL]: - **Flask Debug Mode in Production** [HIGH]: - **Echo Debug Mode in Production** [MEDIUM]: - **Fiber Debug Mode in Production** [MEDIUM]: - **Gin Debug Mode in Production** [MEDIUM]: