4 matches found
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the fillPool logic in index.js and index.cjs. An attacker can make subsequent ID generation deterministic by supplying an oversized size value to nanoidsize, which is coerced into a negative 32-bit...
8.3CVSS5.4AI score0.00296EPSS
SaveExploits0References2
20