Skip to main content
cve.nowby Sazabi
← npm
npmPackage

nanoid

5 known vulnerabilities (3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 high, 2 medium
Weekly downloads
360M
Dependents
3,160
Registry
npm

Advisories 5

  • nanoid: Integer Overflow or Wraparound

    Affected: fixed in 3.3.12; from 4.0.0, fixed in 5.1.11.

  • nanoid Infinite Loop via Negative Size in non-secure module

    Affected: fixed in 3.3.16; from 4.0.0, fixed in 5.1.16.

  • nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom

    Affected: fixed in 3.3.18; from 4.0.0, fixed in 5.1.6.

  • CVE-2024-55565Medium 4.3

    nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.

    Affected: from 4.0.0, fixed in 5.0.9; fixed in 3.3.8.

  • CVE-2021-23566Medium 4.0

    Information Exposure

    Affected: from 3.0.0, fixed in 3.1.31.