CVE-2026-67214

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

CVE-2026-67214 nanoid before 5.1.16 Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

CVE-2026-67214

CVE-2026-67214 (nanoid) affects the Nano ID package prior to 5.1.16, specifically the non-secure module (nanoid/non-secure). The vulnerability is an infinite loop in the customAlphabet and nanoid functions when given a negative size, causing the loop counter to decrement from a negative value and...