1 matches found
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop through the customAlphabet and nanoid functions in nanoid/non-secure. An attacker can hang the calling thread by supplying a negative size to either function, causing the loop counter to decrement from a negative value and...
8.2CVSS5.6AI score0.0033EPSS
SaveExploits0References2
20