Lucene search
+L

15 matches found

RedHat Linux
RedHat Linux
•added 2026/09/23 9:13 p.m.•23 views

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

8.2CVSS6.6AI score0.0033EPSS
SaveExploits0References7
Atlassian
Atlassian
•added 2026/09/02 5:31 p.m.•20 views

DoS (Denial of Service) nanoid Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-67214 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:...

8.2CVSS6.6AI score0.0033EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/08/24 1:13 p.m.•16 views

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

8.2CVSS6.6AI score0.0033EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/08/10 4:23 p.m.•18 views

SUSE CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS6.8AI score0.0033EPSS
SaveExploits0References3
Veracode
Veracode
•added 2026/08/06 5:47 a.m.•28 views

Infinite Loop

nanoid is vulnerable to Infinite Loop. The vulnerability is due to the customAlphabet and nanoid functions in the non-secure module hanging indefinitely when given a negative size, where the loop counter is decremented from a negative value and never reaches its termination condition, and attacke...

8.2CVSS6.8AI score0.0033EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
•added 2026/07/29 9:40 p.m.•22 views

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

8.2CVSS6.6AI score0.0033EPSS
SaveExploits0References7
osv_ghsa
osv_ghsa
•added 2026/07/29 3:31 p.m.•38 views

GHSA-28WG-GHJ8-5HJV nanoid: non-secure generators can loop indefinitely with negative size

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

8.2CVSS6.8AI score0.0033EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/29 2:16 p.m.•25 views

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS0.0033EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/07/29 2:16 p.m.•16 views

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS6.8AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/29 1:32 p.m.•52 views

CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS0.0033EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/07/29 1:32 p.m.•21 views

CVE-2026-67214

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

8.2CVSS6.8AI score0.0033EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/07/29 1:32 p.m.•23 views

CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

8.2CVSS5.5AI score
SaveExploits0References6
CVE
CVE
•added 2026/07/29 1:32 p.m.•422 views

CVE-2026-67214

CVE-2026-67214 (nanoid) affects the Nano ID package prior to 5.1.16, specifically the non-secure module (nanoid/non-secure). The vulnerability is an infinite loop in the customAlphabet and nanoid functions when given a negative size, causing the loop counter to decrement from a negative value and...

8.2CVSS6.8AI score0.0033EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•38 views

PT-2026-65812

Name of the Vulnerable Software and Affected Versions anoid versions prior to 5.1.16 Description The non-secure module nanoid/non-secure contains an infinite loop within the customAlphabet and nanoid functions. This occurs when these functions receive a negative value for the size parameter...

8.2CVSS6.8AI score0.00587EPSS
SaveExploits0References46
Veracode
Veracode
•added 2017/09/14 6:44 p.m.•15 views

Cross-Site Scripting (XSS)

The Play Framework is vulnerable to cross-site scripting XSS. An XSS vulnerability has been found in the secure module login page, allowing attackers to inject and execute arbitrary code...

6AI score
SaveExploits0
Rows per page
Query Builder