CVE-2021-23566

🗓️ 14 Jan 2022 20:05:21Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 250 Views

The package nanoid from 3.0.0 to 3.1.31 allows Information Exposure via the valueOf() function

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: Nanoid as used by IBM QRadar Use Case Manager App is vulnerable to information disclosure (CVE-2021-23566)	16 Jun 202218:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	19 Oct 202221:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties	12 Dec 202317:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to the Improper Removal of Sensitive Information Before Storage or Transfer in Grafana (CVE-2021-23566)	19 Jul 202422:30	–	ibm
Circl	CVE-2021-23566	14 Jan 202222:19	–	circl
CNNVD	nanoid 代码问题漏洞	14 Jan 202200:00	–	cnnvd
CNVD	nanoid information leakage vulnerability	18 Jan 202200:00	–	cnvd
Cvelist	CVE-2021-23566 Information Exposure	14 Jan 202220:05	–	cvelist

NVD

Node

nanoid_project nanoidRange3.0.0–3.1.31node.js

[
  {
    "product": "nanoid",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "3.1.31",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/ai/nanoid/commit/2b7bd9332bc49b6330c7ddb08e5c661833db2575
gist	www.gist.github.com/artalar/bc6d1eb9a3477d15d2772e876169a444
github	www.github.com/ai/nanoid/pull/328
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2332550
snyk	www.snyk.io/vuln/SNYK-JS-NANOID-2332193
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00006.html
lists	www.lists.debian.org/debian-lts-announce/2024/12/msg00025.html

17 Jun 2026 03:38Current

5Medium risk

Vulners AI Score5

CVSS 22.1

CVSS 3.14 - 5.5

EPSS0.0044

CWE-704