GHSA-qrpm-p2h7-hrv2MediumCVSS 5.5

Exposure of Sensitive Information to an Unauthorized Actor in nanoid

Published
January 21, 2022
Last Modified
November 4, 2025

🔗 CVE IDs covered (1)

CVE-2021-23566 →

📋 Description

The package nanoid from 3.0.0, before 3.1.31, are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

🎯 Affected products1

  • npm/nanoid:>= 3.0.0, < 3.1.31

🔗 References (9)