Lucene search
+L

27 matches found

OSV
OSV
•added 2026/09/23 12:36 a.m.•6 views

CLEANSTART-2026-WC95670 nanoid (Nano ID) before 3

Security vulnerability affects the qdrant package. nanoid Nano ID before 3...

9.8CVSS5.9AI score0.0033EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/29 2:16 p.m.•17 views

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

8.2CVSS0.00587EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/29 1:32 p.m.•12 views

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

8.2CVSS5.9AI score0.00587EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2026/07/29 1:32 p.m.•16 views

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

8.2CVSS5.8AI score0.00587EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•28 views

PT-2026-65811

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

8.2CVSS5.9AI score0.00587EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•1 views

CVE-2026-67213: Loop with Unreachable Exit Condition

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

8.2CVSS5.9AI score0.00587EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-2004

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00754EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-3491

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00665EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•6 views

TencentOS Server 4: pcs (TSSA-2024:1104)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1104 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.4AI score0.00665EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/09 6:21 p.m.•25 views

Security Bulletin: IBM Software Support mobile app is vulnerable to multiple vulnerabilities due to 3rd party software

Summary This release includes information about multiple vulnerabilities, improving the overall security and stability of the application. The types of vulnerabilities resolved include: Axios Vulnerability: Addressed an issue that could potentially cause SSRF and credential leakage server and...

8.7CVSS6.8AI score0.0142EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2024-55565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version. CVE-2024-55565 Note that Nessus relies on the presence of the...

6.9AI score0.00665EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/05 4:50 a.m.•23 views

CVE-2024-36400

nano-id is a unique string ID generator for Rust. Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the nanoid::base62 and nanoid::base58 functions. Specifically, the base62 function used a character set of 32 symbols instead of the intended 62...

9.8CVSS6.6AI score0.00754EPSS
SaveExploits1References1
Veracode
Veracode
•added 2025/01/03 5:06 a.m.•15 views

Mishandling Non-integer Values

nanoid is vulnerable to Mishandling non-integer values. The vulnerability is due to insufficient input validation and inadequate type checking in earlier versions of Nano ID, which fails to properly handle non-integer values. It allows attackers to exploit the mishandling of input, leading to...

4.3CVSS4.8AI score0.00665EPSS
SaveExploits0References7Affected Software2
RedhatCVE
RedhatCVE
•added 2024/12/09 7:20 a.m.•18 views

CVE-2024-55565

nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version...

6.5CVSS7.1AI score0.00665EPSS
SaveExploits0References6
CVE
CVE
•added 2024/12/09 12:00 a.m.•476 views

CVE-2024-55565

nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version...

7AI score0.00665EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
•added 2024/06/04 6:40 p.m.•4 views

sessions (>=0.2.0, <=0.6.0), viz (>=0.1.0-alpha.3, <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1, <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0-alpha.5, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:GHSA-9HC7-6W9R-WJ94...

9.8CVSS5.3AI score0.00754EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2024/06/04 6:40 p.m.•31 views

Unable to generate the correct character set

Reduced entropy due to inadequate character set usage Description Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the nanoid::base62 and nanoid::base58 functions. Specifically, the base62 function used a character set of 32 symbols instead of the...

9.8CVSS6.5AI score0.00754EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2024/06/04 6:40 p.m.•69 views

GHSA-9HC7-6W9R-WJ94 Unable to generate the correct character set

Reduced entropy due to inadequate character set usage Description Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the nanoid::base62 and nanoid::base58 functions. Specifically, the base62 function used a character set of 32 symbols instead of the...

9.4CVSS9.5AI score0.00754EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2024/06/04 5:49 p.m.•19 views

Duplicate Advisory: nano-id reduced entropy due to inadequate character set usage

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9hc7-6w9r-wj94. This link is maintained to preserve external references. Original Description Description Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the...

5.4AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/06/04 5:49 p.m.•69 views

GHSA-2HFW-W739-P7X5 Duplicate Advisory: nano-id reduced entropy due to inadequate character set usage

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9hc7-6w9r-wj94. This link is maintained to preserve external references. Original Description Description Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the...

9.4CVSS5.3AI score0.00754EPSS
SaveExploits1References3
Rows per page
Query Builder