Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: nanoid_project Clear all filters
TI-2026-47530 CVE-2026-67214 · GHSA-28wg-ghj8-5hjv

nanoid Infinite Loop via Negative Size in non-secure module

Priority LOW 36

nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure).

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0033 Published 2026-07-29 Partial fix · 5.1.16, 3.3.16 CWE-835
TI-2021-06164 CVE-2021-23566 · GHSA-qrpm-p2h7-hrv2

Information exposure in nanoid

Priority LOW 25

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00473 Published 2022-01-14 Partial fix · 3.1.31 CWE-704