Infinite loop in nanoid · CVE-2024-55565 · GitHub Advisory Database · GitHub

Infinite loop in nanoid

Low severity GitHub Reviewed Published Dec 9, 2024 to the GitHub Advisory Database • Updated Dec 9, 2024

Package

nanoid (npm)

Affected versions

>= 4.0.0, < 5.0.9

< 3.3.8

Patched versions

5.0.9

3.3.8

Description

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

References

Published by the National Vulnerability Database

Dec 9, 2024

Published to the GitHub Advisory Database Dec 9, 2024

Reviewed Dec 9, 2024

Last updated Dec 9, 2024