PT-2022-9413 · Nanoid · Nanoid

🗓️ 14 Jan 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Information exposure via valueOf allows replaying last nanoid for versions 3.0.0–3.1.30; upgrade to 3.1.31 or later.

Reporter	Title	Published	Views	Family All 225
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2024-55565]	12 Mar 202512:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	8 Jan 202518:32	–	ibm
IBM Security Bulletins	Security Bulletin: Additional security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for April 2025.	3 May 202505:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion may be vulnerable to Injection, Regular Expression Denial of Service (ReDoS), and Arbitrary Code Execution and via use of postcss, semver, babel-traverse (CVE-2023-45133, CVE-2022-25883, CVE-2023-44270)	16 Nov 202321:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM includes components with known vulnerabilities	12 Apr 202415:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities	20 Oct 202520:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	14 Feb 202418:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Business Automation Workflow - CVE-2025-27789, CVE-2024-57965, CVE-2025-27152, CVE-2024-55565	3 May 202505:52	–	ibm
IBM Security Bulletins	Security Bulletin: postcss-8.4.14.tgz is vulnerable to CVE-2023-44270 used in IBM Maximo Application Suite - Edge Data Collector	5 Mar 202409:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management	12 Dec 202515:25	–	ibm

Source	Link
github	www.github.com/ai/nanoid/pull/328
gist	www.gist.github.com/artalar/bc6d1eb9a3477d15d2772e876169a444
snyk	www.snyk.io/vuln/SNYK-JS-NANOID-2332193
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2332550
github	www.github.com/ai/nanoid/commit/2b7bd9332bc49b6330c7ddb08e5c661833db2575
osv	www.osv.dev/vulnerability/CVE-2021-23566
security-tracker	www.security-tracker.debian.org/tracker/source-package/node-mocha
security-tracker	www.security-tracker.debian.org/tracker/source-package/node-postcss
security-tracker	www.security-tracker.debian.org/tracker/DLA-4013-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

11 Jan 2025 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.14.3 - 5.5

CVSS 22.1

EPSS0.00166

SSVC