Read the docs

nanoid_project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nanoid_project records in CISA KEV

No nanoid_project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nanoid 3 records LOW

Records

3 records

TI-2026-47530 CVE-2026-67214 · GHSA-28wg-ghj8-5hjv

nanoid Infinite Loop via Negative Size in non-secure module

Priority LOW 36

nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure).

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0033 Published 2026-07-29 Partial fix · 5.1.16, 3.3.16 CWE-835
TI-2021-06164 CVE-2021-23566 · GHSA-qrpm-p2h7-hrv2

Information exposure in nanoid

Priority LOW 25

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00473 Published 2022-01-14 Partial fix · 3.1.31 CWE-704
Open these records in search →