Lucene search
+L

12 matches found

RedHat Linux
RedHat Linux
added 2026/08/24 1:13 p.m.9 views

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

8.2CVSS6.2AI score0.0033EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/08/10 4:23 p.m.8 views

SUSE CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS6.4AI score0.0033EPSS
SaveExploits0References3
Veracode
Veracode
added 2026/08/06 5:47 a.m.12 views

Infinite Loop

nanoid is vulnerable to Infinite Loop. The vulnerability is due to the customAlphabet and nanoid functions in the non-secure module hanging indefinitely when given a negative size, where the loop counter is decremented from a negative value and never reaches its termination condition, and attacke...

8.2CVSS5.4AI score0.0033EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2026/07/29 9:40 p.m.11 views

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

8.2CVSS6.3AI score0.0033EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/29 3:31 p.m.27 views

GHSA-28WG-GHJ8-5HJV nanoid: non-secure generators can loop indefinitely with negative size

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

8.2CVSS5.4AI score0.0033EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/29 2:16 p.m.15 views

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS0.0033EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/07/29 2:16 p.m.8 views

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS6.4AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/29 1:32 p.m.10 views

CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS5.5AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/29 1:32 p.m.9 views

CVE-2026-67214

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

8.2CVSS5.9AI score0.0033EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/29 1:32 p.m.352 views

CVE-2026-67214

CVE-2026-67214 (nanoid) affects the Nano ID package prior to 5.1.16, specifically the non-secure module (nanoid/non-secure). The vulnerability is an infinite loop in the customAlphabet and nanoid functions when given a negative size, causing the loop counter to decrement from a negative value and...

8.2CVSS6.4AI score0.0033EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/07/29 1:32 p.m.39 views

CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS0.0033EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/29 12:00 a.m.29 views

PT-2026-65812

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

8.2CVSS5.9AI score0.0033EPSS
SaveExploits0References4
Rows per page
Query Builder