2 matches found
sessions (>=0.2.0 <=0.6.0), viz (>=0.1.0-alpha.3 <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1 <=0.3.3)
nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:GHSA-9HC7-6W9R-WJ94...
CVE-2024-36400
CVE-2024-36400 (nano-id, Rust) : Affected nano-id versions incorrectly generated IDs by using a reduced character set in base62 (32 symbols instead of 62) and base58 (16 symbols instead of 58), substantially reducing entropy. The nano_id::gen macro is also affected when a non-power-of-two charact...