Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-xwg4-73v4-xw9w
  • npm/nanoid
nanoid: Integer Overflow or Wraparound 01 Sep
  • Fix available
  • Severity - 7.4 (High)
GHSA-28wg-ghj8-5hjv
  • npm/nanoid
nanoid: non-secure generators can loop indefinitely with negative size 29 Jul
  • Fix available
  • Severity - 8.2 (High)
GHSA-2v37-7h3g-55p8
  • npm/nanoid
nanoid: custom generators can loop indefinitely when size is zero 29 Jul
  • Fix available
  • Severity - 8.2 (High)
MAL-2026-418
  • npm/nanoid-js
Malicious code in nanoid-js (npm) 21 Jan
  • No fix available
GHSA-mwcw-c2x4-8c55
  • npm/nanoid
Predictable results in nanoid generation when given non-integer values 09 Dec 2024
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-qrpm-p2h7-hrv2
  • npm/nanoid
Exposure of Sensitive Information to an Unauthorized Actor in nanoid 21 Jan 2022
  • Fix available
  • Severity - 5.5 (Medium)