CVE-2024-55565

4.3 mediumEPSS 0.7%

Medium (4.3). EPSS 0.7% chance of exploitation in the next 30 days. Fixed in nanoid 3.3.8, 5.0.9.

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Severity

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-835
Published: 2024-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-mwcw-c2x4-8c55	npm	nanoid	>=4.0.0 <5.0.9	5.0.9
GHSA-mwcw-c2x4-8c55	npm	nanoid	<3.3.8	3.3.8