ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root

Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-73086 CVE-2026-73086 in nanoid - Patched by Root

Root has patched CVE-2026-73086 in the nanoid package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root

Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-55565 CVE-2024-55565 in nanoid - Patched by Root

Root has patched CVE-2024-55565 in the nanoid package for Root:npm. Multiple fixed versions available...

CVE-2026-73086

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:05+00:00| published-proof-of-concept| https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w 2026-09-05 00:14:08+00:00| seen| https://gist.github.com/djlan/55a70e34ef3841f55902bda07048c6a5...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10618 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-73086 Source advisory: OSV:GHSA-XWG4-73V4-XW9W...

EUVD-2026-56554

nanoid: Integer Overflow or Wraparound...

NPM: nanoid: Integer Overflow or Wraparound

NPM: nanoid: Integer Overflow or Wraparound vulnerability discovered by ? in WordPress Npm nanoid versions 3.3.12...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5830 more potentially affected by CVE-2026-73086 via nanoid (>=4.0.0, <=5.1.9)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-73086 Source advisory: OSV:GHSA-XWG4-73V4-XW9W...

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

SUSE CVE-2026-73086

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corru...

CVE-2026-67214

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10618 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +5830 more potentially affected by CVE-2026-73086 via nanoid (>=4.0.0, <=5.1.9)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

CVE-2026-73086

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

Linux Distros Unpatched Vulnerability : CVE-2026-73086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and...

CVE-2026-73086

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corru...