171 matches found
nanoid: nanoid: Predictable ID generation due to integer overflow
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...
Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838
Summary IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Detai...
CLSA-2026-1790712460 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.4-tuxcare.1...
CLSA-2026-1790707108 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.6-tuxcare.1...
CLSA-2026-1790673732 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 5.1.11-tuxcare.1...
CLSA-2026-1790622992 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 5.1.15-tuxcare.1...
CLSA-2026-1790622758 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.14-tuxcare.1...
CLSA-2026-1790609840 TuxCare security update for nanoid (4 CVEs)
TuxCare rebuilt nanoid to address 4 CVEs. Fixed in 3.3.7-tuxcare.2...
Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.
Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.3.1 before Patch 13 and 5.4.0 before Patch 6. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in nanoid (CVE-2026-67213, CVE-2026-67214)
Summary Multiple vulnerabilities in the nanoid generator library CVE-2026-67213, CVE-2026-67214 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 3.3.17. Vulnerability Details CVEID:CVE-2026-67213 DESCRIPTION: nanoid Nano ID before 5.1.6 contain...
Security Bulletin: The Pre-Validation App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Pre-Validation App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-33750 DESCRIPTION: The...
nanoid: nanoid: Predictable ID generation due to integer overflow
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...
nanoid: nanoid: Denial of Service via negative size input in non-secure module functions
A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in nanoid (CVE-2026-73086)
Summary A predictable unique ID generation vulnerability in the nanoid generator library CVE-2026-73086 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.3.17. Vulnerability Details CVEID:CVE-2026-73086 DESCRIPTION: nanoid is a secure,...
CLEANSTART-2026-WC95670 nanoid (Nano ID) before 3
Security vulnerability affects the qdrant package. nanoid Nano ID before 3...
CLEANSTART-2026-HR55516 nanoid is a secure, URL-friendly, unique string ID generator for JavaScript
Security vulnerability affects the qdrant package. nanoid is a secure, URL-friendly, unique string ID generator for JavaScript...
Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-73646 DESCRIPTION: PostCSS...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-29181 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each...
Security Bulletin: nanoid-3.3.18.tgz (Publicly disclosed vulnerability found by Scanner)
Summary nanoid before 5.1.6/5.1.16 has infinite loops in customAlphabet/customRandom/nanoid non-secure when passed a size of 0 or negative value, hanging the calling thread and causing DoS. CVSS: 5.9 Medium, CWE-835. Vulnerability Details CVEID:CVE-2026-67213 DESCRIPTION: nanoid Nano ID before...