Denial Of Service (DoS)

🗓️ 04 Aug 2026 09:26:14Reported by Veracode Vulnerability DatabaseType

Nanoid denial of service via infinite loop in customAlphabet and customRandom when size is zero.

Reporter	Title	Published	Views	Family All 296
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses nanoid-3.3.11.tgz which is vulnerable to CVE-2026-67213, CVE-2026-67214	31 Aug 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Software	7 Sep 202607:03	–	ibm
ATTACKERKB	CVE-2026-67213	29 Jul 202613:32	–	attackerkb
Chainguard	CVE-2026-67213 vulnerabilities	8 Aug 202620:21	–	cgr
Circl	CVE-2026-67213	29 Jul 202615:22	–	circl
CVE	CVE-2026-67213	29 Jul 202613:32	–	cve
Cvelist	CVE-2026-67213 nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom	29 Jul 202613:32	–	cvelist
Atlassian	DoS (Denial of Service) nanoid Dependency in Crowd Data Center and Server	18 Aug 202622:30	–	atlassian

Vulners

Node

nanoid_project nanoidRange0.1.0–5.1.15js

nanoid_project nanoidRange0.1.0–3.3.16js

nanoid_project nanoidRange4.0.0–5.1.5js

nanoid_project nanoidRange0.1.0–3.3.17js

nanoid_project nanoidRange1.0.4–5.1.11js

Source	Link
github	www.github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7
github	www.github.com/ai/nanoid/releases/tag/5.1.6
vulncheck	www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom

17 Aug 2026 09:17Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.9

CVSS 48.2

EPSS0.00319

SSVC