nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version...
4.3CVSS6.7AI score0.00679EPSS
SaveExploits0References4
RedhatCVE•added 2022/02/04 7:54 p.m.•78 views
CVE-2021-23566
A flaw was found in the nanoid library where the valueOf function allows the reproduction of the last id generated. This flaw allows an attacker to expose sensitive information...
5.5CVSS2.9AI score0.0044EPSS
SaveExploits1References4
OSV•added 2022/01/14 8:15 p.m.•6 views
UBUNTU-CVE-2021-23566
The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf function which allows to reproduce the last id generated...