CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2021-23566
Medium (5.5) in nanoid project nanoid. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in nanoid 3.1.31.
The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWE
- CWE-704
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nanoid_project:nanoid
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qrpm-p2h7-hrv2 | npm | nanoid | >=3.0.0 <3.1.31 | 3.1.31 |