UBUNTU-CVE-2021-23566

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-23566

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-23566.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-23566

Upstream

CVE-2021-23566

Published

2022-01-14T20:15:00Z

Modified

2025-09-08T16:46:59Z

Severity

4.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

References

Affected packages

Ubuntu:Pro:16.04:LTS / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/ubuntu/node-mocha@1.20.1-2?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.20.1-1

1.20.1-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libjs-mocha",
            "binary_version": "1.20.1-2"
        },
        {
            "binary_name": "mocha",
            "binary_version": "1.20.1-2"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/ubuntu/node-mocha@1.20.1-7?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.20.1-7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libjs-mocha",
            "binary_version": "1.20.1-7"
        },
        {
            "binary_name": "mocha",
            "binary_version": "1.20.1-7"
        }
    ]
}

Ubuntu:Pro:20.04:LTS / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/ubuntu/node-mocha@7.0.1+ds1-2?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.1.0+ds3-5

7.*

7.0.1+ds1-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "mocha",
            "binary_version": "7.0.1+ds1-2"
        }
    ]
}

Ubuntu:Pro:20.04:LTS / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/ubuntu/node-postcss@6.0.23-3?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.23-1

6.0.23-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "node-postcss",
            "binary_version": "6.0.23-3"
        }
    ]
}

Ubuntu:22.04:LTS / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/ubuntu/node-mocha@9.2.1+ds1+~cs28.3.8-1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.2.1+ds1+~cs29.4.27-3

9.*

9.1.3+ds1+~cs31.2.38-1

9.2.0+ds1+~cs28.3.8-1

9.2.1+ds1+~cs28.3.8-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "mocha",
            "binary_version": "9.2.1+ds1+~cs28.3.8-1"
        }
    ]
}

Ubuntu:22.04:LTS / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/ubuntu/node-postcss@8.4.6+~cs7.3.21-1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.2.1+~cs5.3.23-8

8.4.5+~cs7.1.51-2

8.4.6+~cs7.3.21-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "node-postcss",
            "binary_version": "8.4.6+~cs7.3.21-1"
        }
    ]
}

Ubuntu:24.04:LTS / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/ubuntu/node-mocha@10.4.0+ds1+~cs33.1.8-1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

10.*

10.2.0+ds1+~cs29.5.1-1

10.4.0+ds1+~cs33.1.8-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "mocha",
            "binary_version": "10.4.0+ds1+~cs33.1.8-1"
        }
    ]
}

Ubuntu:24.04:LTS / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/ubuntu/node-postcss@8.4.31+~cs8.0.26-1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.4.20+~cs8.0.23-1

8.4.31+~cs8.0.26-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "node-postcss",
            "binary_version": "8.4.31+~cs8.0.26-1"
        }
    ]
}

Ubuntu:25.04 / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/ubuntu/node-mocha@10.7.2+ds1+~cs33.1.11-2?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

10.*

10.4.0+ds1+~cs33.1.8-1

10.7.2+ds1+~cs33.1.11-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "mocha",
            "binary_version": "10.7.2+ds1+~cs33.1.11-2"
        }
    ]
}

Ubuntu:25.04 / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/ubuntu/node-postcss@8.4.49+~cs9.2.32-1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.4.39+~cs9.2.29-1

8.4.49+~cs9.2.32-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "node-postcss",
            "binary_version": "8.4.49+~cs9.2.32-1"
        }
    ]
}